Skip to content

Commit 9efe765

Browse files
committed
[MITM] handle JSON content
this allow us to edit JSON traffic. this is useful for APIs injection. f.i. an app which is showing an error message coming from a JSON response with a WebView can be exploited for rendering arbitrary HTML content on the victim machine.
1 parent 309d363 commit 9efe765

1 file changed

Lines changed: 3 additions & 2 deletions

File tree

cSploit/src/main/java/org/csploit/android/net/http/proxy/StreamThread.java

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,8 +36,9 @@ public class StreamThread implements Runnable
3636
"/html",
3737
"/css",
3838
"/javascript",
39-
"/javascript",
40-
"/x-javascript"
39+
"/json",
40+
"/x-javascript",
41+
"/x-json"
4142
};
4243

4344
private final static String HEAD_SEPARATOR = "\r\n\r\n";

0 commit comments

Comments
 (0)