Questions tagged [mitmproxy]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

mitmproxy: Add next hop for specific IP

I need to forward specific requests from machine a.a.a.a via a transparent proxy located at p.p.p.p. In particular, only requests with destination b.b.b.b shall be proxied via p.p.p.p. For this reason,...
0
votes
0answers
56 views

Can not redirect traffic with iptables in MITM

i've been trying to make a MITM attack with Kali linux and a smartphone, using the mitmproxy tool. echo 1 > /proc/sys/net/ipv4/ip_forward arpspoof -i wlan0 -t {smartphone_ip} -r {route_ip} Then I ...
0
votes
1answer
76 views

How to use docker container as a proxy?

I have the following docker-compose: version: '3' services: mitmproxy: image: johnmccabe/mitmweb container_name: mitmproxy command: --cadir /ca --wiface 0.0.0.0 restart: always ...
1
vote
1answer
984 views

Bridge + nftables: How to redirect incoming HTTP/HTTPS traffic to local port 8080?

I have set up a bridge and would like to redirect HTTP/HTTPS traffic traversing it to a local port (8080) so that I can further process it using mitmproxy. So far I was using a combination of ...
0
votes
0answers
47 views

System-wide proxy that blocks certain requests

I'm looking to set up an HTTPS proxy on my server that blocks all outgoing traffic to a certain domain except for GET requests. For example, lets say my server has a Ruby on Rails app, a bunch of ...
1
vote
0answers
532 views

Why does my Docker container eventually lose network connection during selenium testing?

I was given a couple of Docker images for my automated testing on MacOS -- one for mitmproxy (as provided by that third party), the other supports the python/selenium tests I wrote earlier (this image ...
0
votes
1answer
245 views

Is it possible to make OpenSSL work with gnutls?

I have libvirt, one client and one server. Libvirt uses gnutls implementation of tls. I want to use mitmproxy and put in the middle between client and remote server. But mitmproxy uses different ...
0
votes
1answer
159 views

Troubleshooting proxy connection error on legacy app

I'm having to support some legacy client code which makes a network connection to a server using a proprietary protocol over port 1234. A straight internet connection on the client machine works fine, ...
11
votes
4answers
2k views

Apache: Validate SSL chain of trust to prevent MITM-attacks?

I just realized that SSL man-in-the-middle attacks are far more common than I thought, especially in corporate environments. I've heard about and seen myself several enterprises which have a ...
1
vote
2answers
514 views

How to prevent a third party from proxying an HTTPS website?

I am hosting some kind of database management interface on https://www.prettylongdomainname.example/ I have implemented HTTP Strict Transport Security to prevent people accessing this website over ...
0
votes
0answers
155 views

How can I intercept http requests, respond immediately with a custom http response, and also forward the original http request to the server?

I have an application that is stalling each time it makes a http request to a server. It stalls until the response is received from the server. The problem is, the server takes a while to respond to ...
0
votes
2answers
8k views

How to configure mitmproxy to intercept https?

I am trying to use mitmproxy to debug some https requests. I have configured mitmproxy to listen to a certain port: mitmproxy --listen-port 44700 I have configured my environment properly: export ...
0
votes
1answer
599 views

Setting up transparent MitM HTTPS proxy for IoT device?

I have an IoT device that communicates with a remote server via HTTPS over port 443. I would like to intercept the HTTP/HTTPS communication - e.g. using Charles or mitmproxy. If it was a desktop or ...
1
vote
1answer
384 views

How to send outgoing TCP packets on Windows through a remote Linux server?

Let's say I have a Windows computer and a Linux server. I'm looking for a way to route outgoing TCP packets on the Windows computer (all ports) through the Linux server. The Linux server would have ...
7
votes
3answers
7k views

Is SSLsplit the right tool to intercept and re-encrypt HTTPS traffic on a wifi router?

I'm looking to do a vulnerability research on products running on a variety of devices by intercepting their HTTPS traffic, but I don't want to modify the devices aside from installing a custom cert. ...