Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Hstsbypass issue #16

Closed
anoo2niem opened this issue Mar 8, 2017 · 1 comment
Closed

Hstsbypass issue #16

anoo2niem opened this issue Mar 8, 2017 · 1 comment

Comments

@anoo2niem
Copy link

Hi,

i'm running kali linux (4.9.0-kali1-686-pae),
i've just installed the PytheM framework on my kali machine, but when i run hstsbypass and sniff http, i get some errors.

I've used these commands:
set interface 'my interface'
set gateway 'my gateway'
set target 'my target'
arpspoof start
hstsbypass
sniff http

I get these errors by almost every package it intercepts:

Exception happened during processing of request from CLIENT: 192.168.1.183 ---> SERVER: 192.168.1.131
('::ffff:192.168.1.183'  FLAGS:PA SEQ:231337601 ACK:3448508470
, 54306
, 0, 0
Load:
)

Traceback (most recent call last):
GET / HTTP/1.1
Host: www.gogle.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:50.0) Gecko/20100101 Firefox/50.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: nl,en-US;q=0.7,en;q=0.3
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

  File "/usr/lib/python2.7/SocketServer.py", line 596, in process_request_thread

-------------------------------------------------------------------------

    self.finish_request(request, client_address)
  File "/usr/lib/python2.7/SocketServer.py", line 331, in finish_request
    self.RequestHandlerClass(request, client_address, self)
  File "/root/PytheM/modules/sslkill.py", line 100, in __init__
    BaseHTTPRequestHandler.__init__(self, *args, **kwargs)
  File "/usr/lib/python2.7/SocketServer.py", line 652, in __init__
    self.handle()
  File "/usr/lib/python2.7/BaseHTTPServer.py", line 340, in handle
    self.handle_one_request()
  File "/usr/lib/python2.7/BaseHTTPServer.py", line 328, in handle_one_request
    method()
  File "/root/PytheM/modules/sslkill.py", line 146, in do_GET
    req_body_modified = self.request_handler(req, req_body)
  File "/root/PytheM/modules/sslkill.py", line 311, in request_handler
    proxy = re.findall(pxy_regex, h)
NameError: global name 'pxy_regex' is not defined

When i don't use the 'hstsbypass' module everything just works fine.

Do u have any suggestions?
I've also MIMTf installed on this kali machine which also uses an SSLstrip module, could that be the reason?

I've got all the dependecies & the requirements from the txt file installed.

Thanks in advance!

@m4n3dw0lf
Copy link
Owner

That's a bug, my sslstripping module don't have anything in common with the SSLstrip by: leonardonve used on the mitmf, i put the proxy authentication regex in the sniffer module and forgot to take that line out in the sslkill module, thanks for finding it, i'll fix that right now, enter in the directory of pythem and run: git pull

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants