akde/infosec

Click Here

  • TLS Server Response Fingerprint

    JA4S is a sys­tem to hash the con­fig­u­ra­tion of a TLS con­nec­tion. More: ja4/technical_details/README.md at main · FoxIO-LLC/­ja4 · GitHub Pos­si­ble use cases:

  • SSLstrip

    SSLstrip works as proxy which replaces HTTPS ref­er­ences in HTTP, HTML, JS,.… respons­es with HTTP versions. Instal­la­tion: SSLstrip is old. Cre­ate a venv and install an old­er ver­sion of twist­ed: venv/bin/pip install Twisted==18.9.0 Remove HTTPS references via MitM Sce­nario: You want that $tar­get routes all HTTP traf­fic through your own system. Your sys­tem should remove each…