moxie0 / sslstrip

A tool for exploiting Moxie Marlinspike's SSL "stripping" attack.
http://www.thoughtcrime.org/software/sslstrip/
GNU General Public License v3.0
1.91k stars 428 forks source link

302 requests not working #8

Closed sol-vin closed 9 months ago

sol-vin commented 11 years ago

I was pulling my hair trying to figure out why sslstrip wasn't striping even though I was spoofing. After trying for a while I started getting these when loading new pages.

The first one happens on first load, the second one if you hit refresh really quickly after the first load. If you wait awhile the request goes through normally, but ssl still isn't stripped. :( a b

crblanaru commented 11 years ago

Hey,

I've got a fix for that.

Cristian

sol-vin commented 11 years ago

Oh cool! So is this problem resolved?

crblanaru commented 11 years ago

Have a look under pull request ("Fix on location:ht issue in firefox and other related issues"). It should be sorted now. It might take a while until Moxie accepts the change though, so you might want to do the change manually.