6 files changed, 44 insertions, 0 deletions
diff --git a/archive/amo.md b/archive/amo.md
new file mode 100644
index 00000000..d8bde287
--- /dev/null
+++ b/archive/amo.md
@@ -0,0 +1,10 @@
+[https://addons.mozilla.org/en-US/firefox/addon/block-cloudflare-mitm-attack/](https://addons.mozilla.org/en-US/firefox/addon/block-cloudflare-mitm-attack/)
+
+# Block Cloudflare MiTM Attack
+## by [cypherpunks](https://addons.mozilla.org/en-US/firefox/user/JustATorUser/)
+
+If the destination use Cloudflare, block future request.
+
+Please read:
+[https://trac.torproject.org/projects/tor/ticket/24351](https://trac.torproject.org/projects/tor/ticket/24351)
+[http://www.crimeflare.com/](http://www.crimeflare.com/)
diff --git a/archive/block_cloudflare_mitm_attack-1.0.0-an+fx.xpi b/archive/block_cloudflare_mitm_attack-1.0.0-an+fx.xpi
new file mode 100644
index 00000000..225bd419
--- /dev/null
+++ b/archive/block_cloudflare_mitm_attack-1.0.0-an+fx.xpi
diff --git a/archive/headers0.http b/archive/headers0.http
new file mode 100644
index 00000000..598564aa
--- /dev/null
+++ b/archive/headers0.http
@@ -0,0 +1,17 @@
+HTTP/1.1 302 FOUND
+Content-Security-Policy: script-src https://ssl.google-analytics.com/ga.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://addons.cdn.mozilla.net; style-src 'self' 'unsafe-inline' https://addons.cdn.mozilla.net; default-src 'self'; frame-src 'self' https://www.google.com/recaptcha/; child-src 'self' https://www.google.com/recaptcha/; img-src 'self' data: blob: https://ssl.google-analytics.com https://addons.cdn.mozilla.net https://static.addons.mozilla.net https://sentry.prod.mozaws.net; media-src https://videos.cdn.mozilla.net; object-src 'none'; connect-src 'self' https://sentry.prod.mozaws.net; font-src 'self' https://addons.cdn.mozilla.net; form-action 'self' https://developer.mozilla.org; base-uri 'self' https://addons.mozilla.org; report-uri /__cspreport__
+Content-Type: text/html; charset=utf-8
+Date: Mon, 11 Dec 2017 18:27:56 GMT
+ETag: "d41d8cd98f00b204e9800998ecf8427e"
+Location: https://addons.cdn.mozilla.net/user-media/addons/902908/block_cloudflare_mitm_attack-1.0.0-an+fx.xpi?filehash=sha256%3A335868a2ef8966ecd11db6532bca642cbd1d9eb31d5f9f1d79d9bd0d77f15c45
+Public-Key-Pins: max-age=5184000; includeSubDomains; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="r/mIkG3eEpVdm+u/ko/cwxzOMo1bk4TyHIlByibiA5E="
+Server: nginx
+strict-transport-security: max-age=31536000
+Vary: User-Agent
+x-content-type-options: nosniff
+X-Frame-Options: DENY
+X-Target-Digest: sha256:335868a2ef8966ecd11db6532bca642cbd1d9eb31d5f9f1d79d9bd0d77f15c45
+x-xss-protection: 1; mode=block
+Content-Length: 0
+Connection: keep-alive
+
diff --git a/archive/headers1.http b/archive/headers1.http
new file mode 100644
index 00000000..8c0a71cb
--- /dev/null
+++ b/archive/headers1.http
@@ -0,0 +1,15 @@
+HTTP/1.1 200 OK
+Content-Type: application/x-xpinstall
+Content-Length: 9767
+Connection: keep-alive
+Accept-Ranges: bytes
+Cache-Control: max-age=86400
+Content-Security-Policy: default-src 'none'; report-uri https://addons.mozilla.org/__cspreport__
+Date: Mon, 11 Dec 2017 18:29:33 GMT
+Expires: Tue, 12 Dec 2017 18:29:33 GMT
+Last-Modified: Mon, 11 Dec 2017 14:30:08 GMT
+Server: nginx
+X-Cache: Miss from cloudfront
+Via: 1.1 3905f6b396c96f958286f8e228e61547.cloudfront.net (CloudFront)
+X-Amz-Cf-Id: U05sJSn5Gc55Pittka0jqN1NF1a1_b5HNUDS4DLf3-I4U-dXOzJApw==
+
diff --git a/archive/sha256.txt b/archive/sha256.txt
new file mode 100644
index 00000000..07440040
--- /dev/null
+++ b/archive/sha256.txt
@@ -0,0 +1 @@
+335868a2ef8966ecd11db6532bca642cbd1d9eb31d5f9f1d79d9bd0d77f15c45  block_cloudflare_mitm_attack-1.0.0-an+fx.xpi
diff --git a/archive/sha512.txt b/archive/sha512.txt
new file mode 100644
index 00000000..e9c3d46e
--- /dev/null
+++ b/archive/sha512.txt
@@ -0,0 +1 @@
+55e0a9c04e891e9bf3abe5b72d38d4e3213e120adbbbb1422cf5bd21bac4008e546988b987d684cdf8838d773cc8bcd9d61767a53a0b7f5674abc361b1fb3a4c  block_cloudflare_mitm_attack-1.0.0-an+fx.xpi