Sign inSign up

maximalmax90/sslstrip2

By maximalmax90

•Updated almost 5 years ago

http-over-https proxy for old PC/browsers

Image
0

919

maximalmax90/sslstrip2 repository overview

Allows to visit modern sites via http over https from old PCs / browsers. For security purposes, the proxy should be deployed on a local network to which an old PC / browser is connected.

Based on sslstrip2⁠ and dns2proxy⁠.

⁠Example

docker run -d -it --name proxy --cap-add NET_ADMIN -p 2050:10000 maximalmax90/sslstrip2:latest

On client side set proxy for http-protocol to <sslstrip2 proxy ip>:2050

⁠Dockerfile

FROM alpine:3.10
LABEL maintainer="Maxim Makeev <[email protected]>"

ENV proxy_port=10000

#Install packages
RUN apk add --no-cache bash python2 unzip wget iptables py2-twisted py2-attrs py2-dnspython py2-pip gcc g++ python2-dev libpcap-dev py2-openssl supervisor openrc

#Install sslstrip+
RUN wget https://github.com/singe/sslstrip2/archive/refs/heads/master.zip && \
        unzip master.zip && mv /sslstrip2-master /sslstrip2 && \
        cd /sslstrip2 && python setup.py install && \
        rm /master.zip

#Install dns2proxy
RUN wget https://github.com/singe/dns2proxy/archive/refs/heads/master.zip && \
        unzip master.zip && mv /dns2proxy-master /dns2proxy && \
        echo -e "#!/bin/bash\ncd /dns2proxy && python dns2proxy.py" > /usr/bin/dns2proxy && chmod +x /usr/bin/dns2proxy && \
        rm /master.zip

#Enable traffic forwarding
RUN echo -e "net.ipv4.ip_forward=1\nnet.ipv6.conf.all.forwarding=1" > /etc/sysctl.d/forwarding.conf

#Install python modules
RUN pip install pcapy service_identity automat hyperlink pyhamcrest

#Fix attrs error
RUN sed -i 's|len(data)|str(len(data))|g' /usr/lib/python2.7/site-packages/sslstrip/ServerConnection.py

#Disable debug log
RUN sed -i 's|debug_ssl.log|/dev/null|g' /usr/lib/python2.7/site-packages/sslstrip/ClientRequest.py

#Add forwardig rules
RUN echo -e "iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port $proxy_port\niptables -t nat -A PREROUTING -p udp --destination-port 53 -j REDIRECT --to-port 53" > /etc/local.d/forwarding.start

#Enable startup scripts
RUN rc-update add local default
RUN echo -e "[supervisord]\nnodaemon=true\n\n[program:dns2proxy]\ncommand=/usr/bin/dns2proxy\n\n[program:sslstripe]\ncommand=/usr/bin/sslstrip -w /dev/null -l $proxy_port" > /etc/supervisord.conf

EXPOSE 10000/tcp
CMD ["/usr/bin/supervisord", "-c", "/etc/supervisord.conf"]

Tag summary

Content type

Image

Digest

Size

85.9 MB

Last updated

almost 5 years ago

docker pull maximalmax90/sslstrip2