Http Head Poisoner

Many http header cheat tool's found at internet,
but no one's found with managable replacing method.
There I can't replace first head(GET,POST,CONNECT),
not supported "anythink" text (Like * at windows),
can't replace null string or anothrer abnormally
text type(But can got from hexa value),and can't
usage for upload up to 3Kb as size of file

That's reason why HHP's released

-----------------------------------------------------
About Http Head Poisoner:

Support listen as http/https proxy and forward to http/https OR sock5
Support key lock(password) and lock&hidde mode for saving role/config
Support manage (Add/remove) route
Support upload upto 3Kb

Replace method's: SOURCE||DESTINATION

Include : INCLUDE||NUMBER LINE
Ex: Host: dani-diam.blogpot.com||2
(Include to line 2 at header)

Routing : host||/add or /del
Ex: 256.12.14.0||/add
allow 126.12.14.0 until 126.12.14.255

-----------------------------------------------------
$hexa(HexaValue)= Convert hexa value to string
Xample:
For null string -> $hexa(00)
For double null string -> $hexa(00 00)
For triple null string -> $hexa(00 00 00)

(Where 00 is hexa value from null string)
-----------------------------------------------------
^* = Anythink (at repace)

Xample: www.site.xom/^*/index.php
Than :
www.site.xom/download/index.php
www.site.xom/upload/index.php
www.site.xom/home/user/index.php
www.site.xom/member/account/home/index.php
is valid with: www.site.xom/^*/index.php

---------------------------------------------------------
^\del = delete header line/sub (at repace)
Xample:
original header is:
GET / HTTP1.1
Host: site.xom
Connection: keep-alive
User-Agent: dani_browser 1.1

And i set at repace:
Connection: ||^\del

Than Header's became:
GET / HTTP1.1
Host: site.xom
User-Agent: dani_browser 1.1

---------------------------------------------------------
^\block = don't continue header (at repace)
Xample:
When i set at repace:
Connection: keep-alive||^\block
Than when header come's:
GET / HTTP1.1
Host: site.xom
Connection: keep-alive
User-Agent: dani_browser 1.1
That's blocked, because "Connection: keep-alive"
is found at that header


---------------------------------------------------------
^\new = new line (at repace)

---------------------------------------------------------
^\url = Original url of destination (at repace and Include)

========== FRONT QUERY ============
For include Frontquery at header
(xample frontquery's: dani-diam.blogpot.com)
At replace:
GET ||GET dani-diam.blogpot.com@
POST ||POST dani-diam.blogpot.com@
CONNECT ||CONNECT dani-diam.blogpot.com@

========== Change HOST ============
At replace:
Host: ^*||Host: dani-diam.blogpot.com

than your host at header's always
became dani-diam.blogpot.com

========== SET USER AGENT AS BLACKBERRY ============
At replace:
User-Agent: ^*||User-Agent: Mozilla/5.0 (BlackBerry; U; BlackBerry 9800; en) AppleWebKit/534.1+ (KHTML, Like Gecko) Version/6.0.0.141 Mobile Safari/534.1
Accept: ^*||Accept: text/html,application/xhtml+xml,application/xml,application/x-javascript,*/*;q=0.5
x-wap-profile: ||^\del
Accept-Charset: ||^\del
Accept-Encoding: ||^\del
Keep-Alive: ||^\del

At include:
x-wap-profile: "http://www.blackberry.net/go/mobile/profiles/uaprof/9800/6.0.0.rdf"||4

Download (Updated 3 sept 2012)