https://cybertoolchain.io/tools/sslstrip New releases and features in sslstrip, tracked by The Cyber Toolchain. en Fri, 28 Aug 2026 02:09:50 GMT https://github.com/L1ghtn1ng/sslstrip/releases/tag/5.0.0 https://github.com/L1ghtn1ng/sslstrip/releases/tag/5.0.0 Fri, 28 Aug 2026 02:09:50 GMT sslstrip 5.0.0: full Python 3.14 rewrite with new CLI subcommands, nftables lifecycle management, and gated traffic logging • Adds `sslstrip run`, `sslstrip doctor`, `sslstrip cleanup`, and `sslstrip --version` subcommands replacing the old monolithic entry point. • Adds `--ca-file` flag to supply extra lab certificate authorities for TLS verification in controlled environments. • Adds `--traffic-log` and `--traffic-log-file` flags for gated, unredacted traffic logging (both flags required to enable). • Adds managed nftables lifecycle with exclusive `/run/sslstrip` lock, atomic JSON `nft` operations, privilege drop, and automatic forwarding restore — replacing iptables-only setup. • Adds native gzip, Brotli 1.2.0, and stdlib Zstandard decompression including stacked encodings, with an 8 MiB decoded-body limit. • Adds TTL (30-minute) and LRU (10,000-entry) bounds on the secure-link store. • Adds a shared Twisted `Agent` with verified TLS policy and connection pool, orchestrated via native `async def` and `Deferred.fromCoroutine`. • Adds structured HTTP error responses: missing Host header → 400, CONNECT → 405, protocol upgrades → 426, upstream/DNS/TLS failures → 502, timeouts → 504. • Packaging now requires Python 3.14+ (`requires-python = ">=3.14"`) with exact pins for `Twisted[tls]` and `Brotli` via `uv_build` and a locked `uv.lock`. Breaking changes: • Requires Python 3.14 or later (`requires-python = ">=3.14"`); any existing environment running Python 3.x < 3.14 will not work. • The top-level `sslstrip.py` entry point is removed; invocation is now via the `sslstrip` CLI subcommands (`run`, `doctor`, `cleanup`). • iptables-based managed path is removed; nftables is now the first-class managed firewall backend. • Twisted `HTTPClient`, factory, `DnsCache` client stack, and global singletons are removed. • Dynamic import shim and camelCase modules are removed; any code or scripts referencing them will break. • Favicon substitution and the hard-coded E*TRADE expression are removed. • mypy is replaced by strict `ty`; mypy-based CI or type-checking workflows will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/sslstrip