Skip to content

Releases: tintinweb/striptls

version 0.5

20 Jul 21:31
Compare
Choose a tag to compare
  • minor fix detecting xmpp starttls tags
  • dynamic creation of temporary self-signed certificate for interception (requires pyOpenSSL)

version 0.4

15 May 21:00
Compare
Choose a tag to compare
  • added generic ssl/tls detection and interception
  • minor changes to logging
  • added GENERIC.Intercept, GENERIC.InboundIntercept, SMTP.InboundStarttlsProxy

version 0.3

20 Mar 19:17
Compare
Choose a tag to compare
  • improves socket handling
    • nonblocking ssl read/write mode to prevent striptls from stalling with large ssl payloads (e.g. large mail attachments)
  • improves errorhandling
  • adds SMTP.InboundStarttlsProxy, SMTP.InjectCommand, IMAP.DowngradeToV2
  • fixes witnesses
  • adds IRC and ACAP protocol support
  • log ssl context (cipher/version)

version 0.2

10 Feb 21:36
Compare
Choose a tag to compare
  • fixed transparent forwarding bug for unhandled protocols
  • verified IMAP, POP3, NNTP, FTP, XMPP
  • added SMTP.ProtocolDowngradeStripExtendedMode
  • added POP3.StripFromCapabilities
  • added XMPP.StripInboundTLS, XMPP.UntrustedIntercept
  • added vulnerability checks

version 0.1

02 Feb 21:54
Compare
Choose a tag to compare

initial release

  • audit mode
  • vectors for SMTP, IMAP, POP3, NNTP, FTP, XMPP
  • vector types: StripFromCapabilities, StripWithInvalidResponseCode, UntrustedIntercept, StripWithTemporaryError, StripWithError