http-over-https proxy for old PC/browsers
919
Allows to visit modern sites via http over https from old PCs / browsers. For security purposes, the proxy should be deployed on a local network to which an old PC / browser is connected.
Based on sslstrip2 and dns2proxy.
docker run -d -it --name proxy --cap-add NET_ADMIN -p 2050:10000 maximalmax90/sslstrip2:latest
On client side set proxy for http-protocol to <sslstrip2 proxy ip>:2050
FROM alpine:3.10
LABEL maintainer="Maxim Makeev <[email protected]>"
ENV proxy_port=10000
#Install packages
RUN apk add --no-cache bash python2 unzip wget iptables py2-twisted py2-attrs py2-dnspython py2-pip gcc g++ python2-dev libpcap-dev py2-openssl supervisor openrc
#Install sslstrip+
RUN wget https://github.com/singe/sslstrip2/archive/refs/heads/master.zip && \
unzip master.zip && mv /sslstrip2-master /sslstrip2 && \
cd /sslstrip2 && python setup.py install && \
rm /master.zip
#Install dns2proxy
RUN wget https://github.com/singe/dns2proxy/archive/refs/heads/master.zip && \
unzip master.zip && mv /dns2proxy-master /dns2proxy && \
echo -e "#!/bin/bash\ncd /dns2proxy && python dns2proxy.py" > /usr/bin/dns2proxy && chmod +x /usr/bin/dns2proxy && \
rm /master.zip
#Enable traffic forwarding
RUN echo -e "net.ipv4.ip_forward=1\nnet.ipv6.conf.all.forwarding=1" > /etc/sysctl.d/forwarding.conf
#Install python modules
RUN pip install pcapy service_identity automat hyperlink pyhamcrest
#Fix attrs error
RUN sed -i 's|len(data)|str(len(data))|g' /usr/lib/python2.7/site-packages/sslstrip/ServerConnection.py
#Disable debug log
RUN sed -i 's|debug_ssl.log|/dev/null|g' /usr/lib/python2.7/site-packages/sslstrip/ClientRequest.py
#Add forwardig rules
RUN echo -e "iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port $proxy_port\niptables -t nat -A PREROUTING -p udp --destination-port 53 -j REDIRECT --to-port 53" > /etc/local.d/forwarding.start
#Enable startup scripts
RUN rc-update add local default
RUN echo -e "[supervisord]\nnodaemon=true\n\n[program:dns2proxy]\ncommand=/usr/bin/dns2proxy\n\n[program:sslstripe]\ncommand=/usr/bin/sslstrip -w /dev/null -l $proxy_port" > /etc/supervisord.conf
EXPOSE 10000/tcp
CMD ["/usr/bin/supervisord", "-c", "/etc/supervisord.conf"]Content type
Image
Digest
Size
85.9 MB
Last updated
almost 5 years ago
docker pull maximalmax90/sslstrip2