not working nowadays

[roccomuso]

[DinisCruz]

what was the set-up you had (what browser did you use?)

also , it looks like you tried to open an https page and the proxy is currently only proxying http requests

[roccomuso]

Yeah but the ssl strip is meant to "strip" the pages with HTTPS right? that's supposed to be his main goal.

[DinisCruz]

yes and that is done with this line https://github.com/o2platform/node-ssl-strip/blob/master/poc/google.coffee#L21 on http traffic

Note that there is a white list of domains to apply modifications to

if you run the poc (i.e. ./node_modules/.bin/coffee poc/google.coffee) you are only intercepting google.co.uk and google.com

[roccomuso]

alright, but what about HSTS?

[DinisCruz]

well HSTS will prevent this from happening.

When you have HSTS you can't really man-in-the-middle like this (which is the point of HSTS :) )

[roccomuso]

That's why it's not working with google.com either.