tintinweb / striptls Goto Github PK

This project seems awesome although I haven't had time to play around with it much.
Looking at the code, the "Vectors" all seem to have mangling methods implemented.
I'm not sure if I understood it correctly but it is technically possible to modify generic SSL/TLS data right?
It would be nice to add some sort of plugin mechanism in order to code custom SSL/TLS manipulation attacks.

Is it already possible to do this by modifying the "mangle_server_data" and "mangle_client_data" in InboundIntercept class?

I think this project is already great, but it has much more potential. I would like to see this turn into a extensible generic SSL/TLS interception AND modification proxy. I could help although my crypto knowledge is not that deep...

Some XMPP servers announce ` like:

<stream:stream xmlns:stream='http://etherx.jabber.org/streams' version='1.0' from='xxxyy' id='574f158c-bfbf-4b88-805e-2fa420043c9c' xml:lang='en' xmlns='jabber:client'>
<stream:features>
  <starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/>
  <mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>SCRAM-SHA-1</mechanism><mechanism>DIGEST-MD5</mechanism></mechanisms>
</stream:features>

but striptls requires them in the form

<starttls …></starttls>

i.e. with an explicit starttls closing tag.