administration, development, security, webserver,

Bypass chrome tls security checks

agowa338 agowa338 Dec 19, 2018 · 1 min read
Share this

Normally things like invalid certificates throw an error within google chrome, and if the page has HSTS in place, there is no way to bypass that error. For normal users this is a good thing, but if you're the developer/admin and have logged out yourself because of a miss configured server or you're a pentester and want to access the contents of a wrongly configured web server, this becomes just an annoyance.

Just type

thisisunsafe
into the webpage (it'll look like nothing hapens while typing). Google Chrome then redirects to the actual page.

agowa338
Written by agowa338