I have a question concerning the usage of SSLstrip2 to bypass HSTS on websites.
I managed to successfully install and deploy SSLStrip2 (in combination with DNS2Proxy). This means that when using a browser and visiting a website, the website will communicatie via HTTP.
However, when a website was already visited once by using HTTPS, this header is maintained and the browser will always use HTTPS (HSTS header). The result of this is that the webpage is stuck on loading.
Is it possible to force HTTP on websites which were never visited before, but still redirect users to the HTTPS version if they visited the website once before, so the page will load no matter what.
Any help would be appreciated very much, there are not very much forums on the internet concerning this topic so I rely on the knowledge of StackExchange again.