diff options
| author | nullius <nullius@nym.zone> | 2017-12-11 20:45:10 +0000 |
|---|---|---|
| committer | nullius <nullius@nym.zone> | 2017-12-11 20:45:10 +0000 |
| commit | e2c115d0f2b9780fcf636aba1370654f5250bdb2 (patch) | |
| tree | ede1e7b0a08a0c3212f00fa9394286cf0d002423 /src/stop_cf_mitm.js | |
| download | cloudflare-tor-e2c115d0f2b9780fcf636aba1370654f5250bdb2.tar.lz cloudflare-tor-e2c115d0f2b9780fcf636aba1370654f5250bdb2.tar.xz cloudflare-tor-e2c115d0f2b9780fcf636aba1370654f5250bdb2.zip | |
Import XPI and code from addons.mozilla.org
Initial commit. Version 0.0.0-prealpha.
- Glance over code to make sure it looks sane
- Create git repository
- Add substantive files
- Fix icons (PNG CRC errors)
- Add archival copy of xpi from addons.mozilla.org, with metadata
- Add README.md, LICENSE.md
- NOT YET TESTED BY MAINTAINER (@nym-zone)
Diffstat (limited to 'src/stop_cf_mitm.js')
| -rw-r--r-- | src/stop_cf_mitm.js | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/src/stop_cf_mitm.js b/src/stop_cf_mitm.js new file mode 100644 index 00000000..f00c9eb2 --- /dev/null +++ b/src/stop_cf_mitm.js @@ -0,0 +1,33 @@ +/* + <<< Detect Cloudflare MiTM Attack >>> + by Sw + why? because... + https://trac.torproject.org/projects/tor/ticket/24351 + http://www.crimeflare.com/ +*/ +//=============================================== +function analyzemydata(res){ +//console.log("mitmdetector: scanning: "+res.url); +var cflink=document.createElement('a');cflink.setAttribute('href',res.url); +var cf_hostname=cflink.hostname; +var cf_protocol=cflink.protocol; +var cf_gothead=res.responseHeaders; +cflink=null; +if ((cf_protocol=='http:'||cf_protocol=='https:') && cf_hostname.length>=4){ +//console.log("mitmdetector: testing...: "+res.url); +var is_cloudflare_infected=0;// 2 to confirm +for(var i=0;i<cf_gothead.length;i++){ +var cfv=cf_gothead[i]; +if (cfv['name']=='cf-ray' && cfv['value']!=undefined){is_cloudflare_infected+=1;} +if (cfv['name']=='server' && cfv['value'].includes("cloudflare")){is_cloudflare_infected+=1;} +if (is_cloudflare_infected==2){break;} +} +if (is_cloudflare_infected>=1){ +console.log('SECURITY_WARN: Cloudflare Detected: '+res.url); +return {redirectUrl: "https://0.0.0.0/"};// just drop the connection +} +} +return; +} +browser.webRequest.onHeadersReceived.addListener(analyzemydata,{urls: ["<all_urls>"]},["blocking","responseHeaders"]); +//
\ No newline at end of file |