{"id":26212350,"url":"https://github.com/hackinggate/http-requests-hijacking","last_synced_at":"2026-04-24T00:31:56.113Z","repository":{"id":46397279,"uuid":"417852484","full_name":"HackingGate/HTTP-requests-hijacking","owner":"HackingGate","description":"Reveal what's inside the HTTP requests without send data to its actual destination","archived":false,"fork":false,"pushed_at":"2021-10-17T07:07:16.000Z","size":7,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-12-28T16:23:31.654Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/HackingGate.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-10-16T14:28:47.000Z","updated_at":"2021-10-17T07:07:19.000Z","dependencies_parsed_at":"2022-09-19T05:40:13.594Z","dependency_job_id":null,"html_url":"https://github.com/HackingGate/HTTP-requests-hijacking","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/HackingGate/HTTP-requests-hijacking","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HackingGate%2FHTTP-requests-hijacking","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HackingGate%2FHTTP-requests-hijacking/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HackingGate%2FHTTP-requests-hijacking/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HackingGate%2FHTTP-requests-hijacking/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/HackingGate","download_url":"https://codeload.github.com/HackingGate/HTTP-requests-hijacking/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/HackingGate%2FHTTP-requests-hijacking/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32204706,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-24T00:06:41.111Z","status":"ssl_error","status_checked_at":"2026-04-24T00:06:35.224Z","response_time":53,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-03-12T08:30:05.192Z","updated_at":"2026-04-24T00:31:56.072Z","avatar_url":"https://github.com/HackingGate.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# HTTP-requests-hijacking\nReveal what's inside the HTTP requests without send data to its actual destination\n\n## Getting Started\n\nOn any unix like machine. Make sure `node` is installed and port `80/443` is not in use.\n\n1. Clone the project\n```sh\ngit clone https://github.com/HackingGate/HTTP-requests-hijacking\ncd HTTP-requests-hijacking\n```\n\n2. Install dependencies\n```\nnpm install\n```\n\n3. Generate a self-signed SSL certificate\n```sh\n# Commands form https://nodejs.org/en/knowledge/HTTP/servers/how-to-create-a-HTTPS-server/\nopenssl genrsa -out key.pem\nopenssl req -new -key key.pem -out csr.pem\nopenssl x509 -req -days 9999 -in csr.pem -signkey key.pem -out cert.pem\nrm csr.pem\n```\n\n4. Run the node server (`sudo` may required)\n```sh\nnode app.js\n```\n\n## HTTP Hijacking\n\nHijack your DNS. Point traget domains to your node server's IP address.\n\n## HTTPS hijacking\n\nSelf-signed SSL certificate is not trusted on client devices so connection won't complete.\n\nTo fix that, generate a root certificate or use [SSL proxying](https://docs.proxyman.io/basic-features/ssl-proxying) feature on a [web debugging proxy](https://proxyman.io).\n\n(charles 4.6.2 don't support TLS 1.2, I'm using Proxyman 2.34.1 on my Mac instead.)\n\n## Known Limitations\n\n- If you don't have the original certificate then SSL pining is not supported. ([Can we bypass SSL Pinning?](https://proxyman.io/posts/2019-11-15-Can-we-bypass-ssl-pinning))","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhackinggate%2Fhttp-requests-hijacking","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fhackinggate%2Fhttp-requests-hijacking","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fhackinggate%2Fhttp-requests-hijacking/lists"}