HTTP Injector

HTTP Injector

https://apps.evozi.com/httpinjector/

HTTP Injector  Mobile proxy server with the ability to modify requests and access blocked websites behind firewall, etc !lossary

Payload 9eyword

Inject Method

Troubleshoot

5P+

!lossary "efore we #et started, let$s understand the meanin# #

Word

Meaning

[Main]

Payload

HTTP header data payload that will be injected

%emo %emote te Pro Proxy xy

%emo %emote te HTT HTTP P prox proxy y &ex' &ex' (qu (quid id prox proxy) y)*P *P+ + prox proxy y

-ebu -ebu# # Mode Mode

(how (how your your data data tha thatt you you send send)r )rece eceiv ived ed in in app app lo# lo# &Ple &Pleas ase e turn turn off off duri durin# n# normal usa#e

[SSH/Setting]

"att "atter ery y (ave (averr

-isab -isable le .ak .akel eloc ock k that that pre preve vent nt you yourr /P0 /P0 from from sle sleepi epin# n#

!oo#l !oo#le e -+( -+(

0se 0se !oo#l !oo#le e -+( -+( to bypas bypass s bloc blocke ked d webs websit ites es and and pre preve vent nt your your I(P I(P from from knowin# what websites you$re visitin#

(tart art (( ((H

(tart art (( ((H co conne nnection up upon st startin# injecti ction

/onnect /onnect Mode Mode

There$ There$s s two modes modes,, iptabl iptables es &root &root whic which h will will require require root root and and it only only tunnel tunnel port 12 and 334 traffic 5P+ (ervice mode is for *ndroid 326 and will tunnel all traffic to your server &Please use root mode, if you are havin# issue with 5P+ (ervice mode

((H

(ecure (h (hell is is a encrypted ne network pr protocol fo for in initiatin# te text7based sh shell sessions on remote machines in a secure way

((H Host ((H ((H Por Portt :vo;i 7 email
((H IP)hostname The The por portt for for your your ((H ((H ser serve verr, nor norma mall lly y wil willl be be por portt 88 88 &+o &+orm rmal ally ly publ public ic squid)http proxy will block port 88

HTTP Injector

https://apps.evozi.com/httpinjector/

#

Word

Meaning

0sername

((H username

Password

((H password

-ata /ompression

/ompress data packet usin# ;lib

0pstream Proxy

HTTP Injector currently is usin# port 1=1= &fixed, you have to enable and set >8?22>'1=1= for the ((H to connect to HTTP I njector local proxy server

Payload 9eyword 0sin# the below keyword, the app will automatically replace with relavent data upon injection, you don$t need to replace the word inside the square bracket unless you know what you are doin#

Supported keyword: @hostA @portA @hostBportA @protocolA @net-ataA @crA @lfA @crlfA @lfcrA

 *ssume that >11>22>22>84 is your ((H (erver IP and 88 is your ((H port

Keyword

Auto Replaced

Meaning

[hot]

>11>22>22>84

-estination host

[port]

88

-estination port

[hot!port]

>11>22>22>84'88

-estination host and port, seperated by colon '

[h]

>11>22>22>84'88

((H server ip and port that you set at settin#s

[protocol]

HTTPC>2 or HTTPC>>

HTTP protocol version

[net"ata]

/D++:/T @hostBportA @protocolA

(hort form of three keywords

[cr]

Cr

/arria#e %eturn, 06222-

[l]

Cn

Eine Feed, 06222*

[crl]

CrCn

/% &06222- followed by EF &06222*

[lcr]

CnCr

EF &06222* followed by /% &06222-

[crl][crl]

CrCnCrCn

To indicate the end of HTTP header  

HTTP Injector

https://apps.evozi.com/httpinjector/

Inject Method $otice: In this example we are usin# G/D++:/TG  GH:*-G request method and domaincom as the host you want to spoof, you mi#ht need to use !:T)PD(T)-:E:T:)/D++:/T)H:*- Make sure your remote HTTP proxy allow the request method else you will #et 324 error

%ip: 0se GPayload !eneratorG inside HTTP Injector app instead of writin# manually +ormally we just need to use G/D++:/TG request method

Method

&ayload

$ormal

/D++:/T @hostBportA @protocolA@crlfAHost' domaincom@crlfA@crlfA

'ront (n)ect

!:T http'))domaincom) HTTP)>>@crlfAHost' domaincom@crlfA@crlfA/D++:/T @hostBportA @protocolA @crlfA@crlfA

*ack (n)ect

/D++:/T @hostBportA HTTP)>>@crlfA@crlfA!:T http'))domaincom) @protocolA@crlfAHost' domaincom@crlfA@crlfA

'ront

/D++:/T domaincom<@hostBportA@crlfA!:T http'))domaincom) @protocolA@crlfAHost'

+uery

domaincom@crlfA@crlfA

*ack

/D++:/T @hostBportA
+uery

domaincom@crlfA@crlfA

Troubleshoot ,-. rror code 7 If you are #ettin# 428 HTTP header code that mea ns your I(P is redirectin# your request to their captive portal pa#e +ormally I(P blacklisted your remote proxy or the HTTP Payload 0-- rror code 7 This indicate that your payload is invalid and can$t be understand by remote proxy 1onnection timeout 7 It could be that your network connection is slow or the remote proxy is slow

5P+ &iphon 7 To use with psiphon &uncheck (tart ((H, you can$t use @hostBportA in your payload, you need to #et the ((H IP of psipon and hardcode it ¬ tested

HTTP Injector

https://apps.evozi.com/httpinjector/

2pen3&$ 7 -isable G(tart ((HG and use HTTP Injector with your Dpen5P+ if you don$t have ((H server ou have to add http-proxy 127.0.0.1 8989  and bypass route route replace_to_your_remote_proxy_ip 255.255.255.255 net_gateway  &chan#e GreplaceBtoByourBremoteBproxyBipG to IP to your 5P+ confi#