Generic SSL/TLS Modification [question / enhancement] about striptls

[tintinweb]

Hi @Esser420
Thank you for your feedback, I am happy to hear the project is useful to you.

While the project turned into a generic TLS detection and MitM attack tool it originally started out as a tool to draft TLS stripping attacks. As such, it is required to be able to manipulate traversing messages. This is what - besides others - mangle_server_data and mangle_client_data can be used for. Sockets are wrapped in another class to make sure tcp and tls sockets share a common interface and behavior (they're actually very different). mangle_server|client_data therefore operates either on a tls or tcp socket, depending on the protocols state. Since the project is using the python tls implementation wrapping the tcp socket with a tls context it might not be easy to achieve the tls protocol manipulation you're looking for as the python tls socket will quickly get out of sync (unless you're only using python tls api) if you modify anything underneath it.

Please provide an example of the modification part of the proxy implementation to see if this would be feasible.

cheers
tin

[tintinweb]

closing due to inactivity.