2020-03-18 10:28:19 +00:00
|
|
|
|
### Are links vulnerable to MITM attack?
|
|
|
|
|
|
2020-08-04 02:27:18 +00:00
|
|
|
|
`Scan FQDN using API`
|
2020-03-18 10:28:19 +00:00
|
|
|
|
|
|
|
|
|
![](../image/ismmpreview.jpg)
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
You′ve found something on the internet.
|
|
|
|
|
Are these links or images vulnerable to MITM attack or not?
|
|
|
|
|
|
2020-10-23 00:34:29 +00:00
|
|
|
|
This add-on is using[1] Crimeflare′s Public[4] API to scan[3] FQDN.
|
2020-03-18 10:28:19 +00:00
|
|
|
|
e.g. https://ekzemplo.com/page.html → "ekzemplo.com"
|
|
|
|
|
|
|
|
|
|
This add-on never send other information.
|
|
|
|
|
|
2020-07-22 04:20:08 +00:00
|
|
|
|
|
|
|
|
|
|
2020-10-23 00:34:29 +00:00
|
|
|
|
[1] How to use offline database
|
2020-07-22 04:20:08 +00:00
|
|
|
|
1. Open add-on's option page and select "Use Offline Local Database".
|
|
|
|
|
2. Click "Database" link.
|
2020-10-23 00:34:29 +00:00
|
|
|
|
3. Create a new text file[2] (or download text file from cloudflare-tor)
|
2020-07-22 04:20:08 +00:00
|
|
|
|
4. Click "Import Database" and select your text file.
|
|
|
|
|
5. Wait until the message appear.
|
|
|
|
|
|
2020-10-23 00:34:29 +00:00
|
|
|
|
[2] Text file example
|
|
|
|
|
(FQDN/Domain)
|
|
|
|
|
--------------------
|
|
|
|
|
www.cloudflare.com
|
|
|
|
|
domain.com
|
|
|
|
|
example.org
|
|
|
|
|
--------------------
|
2020-09-12 23:13:28 +00:00
|
|
|
|
|
2020-10-23 00:34:29 +00:00
|
|
|
|
[3] "Observe and Learn" mode
|
2020-09-12 23:13:28 +00:00
|
|
|
|
If you don't want to use online public API, or don't want to maintain offline database
|
|
|
|
|
this option is for you.
|
2020-09-12 23:14:30 +00:00
|
|
|
|
You'll have to visit cloudflared website first because this add-on never make a
|
|
|
|
|
request to websites.
|
2020-10-23 00:34:29 +00:00
|
|
|
|
To activate this option, go to "Database" section and select "Use offline local database".
|
|
|
|
|
To purge local database, go to "Database" section and click "Database", "Clear all data".
|
|
|
|
|
|
|
|
|
|
[4] Public API services
|
|
|
|
|
You can select which API service you want to use.
|
2020-09-12 23:13:28 +00:00
|
|
|
|
|
2020-03-18 10:28:19 +00:00
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Download add-on
|
2020-11-10 09:28:19 +00:00
|
|
|
|
- From Crimeflare (_Recommend_): [Firefox ESR / Chromium](https://cfe.nnpaefp7pkadbxxkhz2agtbv2a4g5sgo2fbmv3i7czaua354334uqqad.onion/)
|
2020-09-13 00:04:48 +00:00
|
|
|
|
- From Gitea (Delay Sync): [FirefoxESR](https://codeberg.org/crimeflare/cloudflare-tor/raw/branch/master/addons/releases/ismm.xpi) / [Chromium](https://codeberg.org/crimeflare/cloudflare-tor/raw/branch/master/addons/releases/ismm.crx)
|