w13scan
w13scan copied to clipboard
do_CONNECT filter is not working
Hi, I noticed that at code https://github.com/w-digital-scanner/w13scan/blob/master/W13SCAN/lib/proxy/baseproxy.py#L423-L450 you are trying to relay some HTTPS requests directly accroding to the extension in the CONNECT
request, but it looks like it will not going to work, because the CONNECT
request does not contain any extension information.
reproduce
- run
python3 w13scan.py -s 127.0.0.1:8081
- use 127.0.0.1:8081 proxy at your browser
- visit https://www.baidu.com/favicon.ico
- check the browser certificate
- you will see W13scan cert instead baidu cert