I just started learning MITM attacks and I use MITMF to perfom these attacks. I have one question regarding to sslstrip. I notice that sslstrip only works when we first clear the cache and history in our victim's browser. Is this always the case? Or is there any workarounds for this?
I've been thinking of maybe doing a dns spoof and then running a script to clear all the cookies in the browser but I'm not sure if this will works.
edit : I do understand that sslstrip wont work on HSTS websites but will it work without having the victim to clear their cookies first?