Collaborate Disseminate
Goal
The main goal is to monitor all the URL logging (HTTPS) of a specific device in my Network. So I’m decided to buy a Security tool WifiPineApple from Hak5 store.
Ex. Alexa, Chromecast, and maybe iPad.
Steps (Windows 10 PC)
I did… Continue reading Monitor HTTPS URL logging of a specific device of a Network
I downloaded two different third-party apps (running on Windows) in order to figure what HTTP calls does it make to an external server on the internet.
Both apps are calling the same server as far as I have guessed.
I installed Charles … Continue reading Force third party app to trust Charles Root Certificate
In this environment an intercepting HTTPS proxy is used for legitimate purposes and its CA root certificate is installed on all clients. Every HTTPS proxy solution I’ve seen so far simply signs a new certificate directly with the CA, not p… Continue reading Reasons not to preserve the certification path on an intercepting HTTPS proxy
Everything earlier used to work fine. However, recently I downloaded a newer virtual device on Genymotion, which is an Android 8.0 API 26. I have been struggling to get HTTPS traffic intercepted on this device. Some digging suggested that … Continue reading BURP SSL connection failing on Genymotion Virtual Device – Android 8.0 API 26
I want to know that what the security impact is if someone leaks the password of a PKCS12 certificate. I am referring to the password which is required when we export the certificate.
Continue reading PKCS12 password stolen – what’s the security impact?
Is there such application for my smartphone than can monitor and block the internet traffic of my PC? Or should I use something like a WireShark eqivalent to intercept the PC’s traffic? Reason behind doing this is because I don’t think my … Continue reading How do I use my Android smartphone as a firewall for my PC? [closed]
How is it possible the intercept https requests made by a flutter app that I do not own source code of(I just have an apk file)?
I already tried SSL unpinning module of Xposed Framework.(no luck)
Continue reading How to intercept ssl requests made by a flutter android app?
I am trying to intercept the Traffic of my iPhone default mail client.
I have burp suite setup with the certificate installed correctly cause I get traffic from the browser but I don’t see the traffic from my mail app.
Could someone hel… Continue reading Trying to intercept iphone native mail application Traffic on Burp Suite [closed]
I’m a beginner at proxy traffic stuff and I’m struggling here with Charles Proxy
I’m trying to ‘intercept traffic’. I have an HTTPS page and I want to display the data from the content (inside Charles proxy).
ALL my https are returning … Continue reading How to display HTTPS contents [Using Proxy]
I’ve got an issue with a proposed infrastructure set up so I come to you for some enlightenment.
The flow is: client –> fw–> waf–> api gw–> applications.
Clients will communicate with us using mtls. The fw can’t terminate mtls so it… Continue reading Insecurity through all the security. (Questions on infrastructure set up)