├── .gitignore
├── util
├── run.sh
├── process.py
├── scrape.py
├── results.log.sample
└── strict-transport-security.txt
├── README.md
├── LICENSE
├── index.html
├── blacklist.js
├── index.js
└── hosts.js
/.gitignore:
--------------------------------------------------------------------------------
1 | *.log
2 |
--------------------------------------------------------------------------------
/util/run.sh:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env bash
2 |
3 | # usage: ./run.sh {floor(number_of_requests_to_try/BATCH_SIZE)}
4 | LOOPS=$1
5 |
6 | # Assumes the redirect chain terminates in <300ms. Adjust depending on patience.
7 | TIMEOUT="30"
8 | # This is limited by system max open file descriptors. (ulimit -n)
9 | BATCH_SIZE="200"
10 |
11 | if hash timeout 2>/dev/null; then
12 | CMD="timeout"
13 | elif hash gtimeout 2>/dev/null; then
14 | CMD="gtimeout"
15 | else
16 | echo >&2 "please install timeout or gtimeout. aborting."
17 | exit 1
18 | fi
19 |
20 | i="0"
21 | while [ $i -lt $LOOPS ]
22 | do
23 | # TODO: Read the STS file once and cache it.
24 | $CMD $TIMEOUT ./scrape.py "$(($i * $BATCH_SIZE))" $BATCH_SIZE
25 | i=$[$i+1]
26 | done
27 |
--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
1 | # Sniffly2
2 |
3 | Sniffly2 is a variant of
4 | [Sniffly](https://github.com/diracdeltas/sniffly/tree/master)
5 | which abuses HTTP Strict Transport Security headers and the Performance Timing
6 | API in order to sniff your browsing history in Chromium-based browsers.
7 |
8 | ## Demo
9 |
10 | Visit http://diracdeltas.github.io/sniffly in Chrome/Chromium/Brave/etc. with HTTPS
11 | Everywhere disabled.
12 |
13 | Caveats:
14 |
15 | * does not work on mobile or Firefox
16 | * does not work over HTTPS due to mixed content blocking.
17 | * adblockers may taint results
18 |
19 | ## Acknowledgements
20 |
21 | * [crbug436451](https://bugs.chromium.org/p/chromium/issues/detail?id=436451), reported by `imfaster...@gmail.com`, for the idea of probing port 443 over HTTP
22 | * Scott Helme for providing an initial list of HSTS hosts
23 |
--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
1 | The MIT License (MIT)
2 |
3 | Copyright (c) 2015 Yan Zhu
4 |
5 | Permission is hereby granted, free of charge, to any person obtaining a copy
6 | of this software and associated documentation files (the "Software"), to deal
7 | in the Software without restriction, including without limitation the rights
8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 |
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 |
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 |
23 |
--------------------------------------------------------------------------------
/index.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 | Sniffly2
5 |
6 |
7 |
8 |
9 |
10 |
11 |
