Collaborate Disseminate
I am studying for Comptia security. I still cannot get my head around SSL decryptors. For me it just seems like a kind of man-in-the-middle (on-path). Basically, it just sits in the middle of traffic, decrypts the traffic, inspects for mal… Continue reading How do SSL decryptors work? Is it a man-in-the middle? [duplicate]
There are two options, what is the best approach?
I want to either
Create a squid proxy server that detects MITM attacks
or
Create a python UI application to detect differences between local certificate store and certificate sent from s… Continue reading Preventing MITM Attack with Squid
I want to understand if end user is doing MITM attack on my app and i want my API server to receive this. Is there any way i can hook an SDK or some listener that tracks which certificate is being used for outgoing / incoming requests at s… Continue reading Prevent ssl pinning bypasses
I don’t know if this is the right forum for this kind of question.
I was trying to intercept traffic from Twitter for Android app and for that I needed to bypass the SSL pin they implemented. Basically I was following this tutorial
and I g… Continue reading Can’t log in into Twitter for Android app after SSL Bypass
I have been reading a number of articles that state it is not possible for an inspection proxy to simply drop-out/disengage from a TLS 1.3 connection in the same way that is possible in TLS 1.2.
Such articles never seem to explain exactly … Continue reading Exactly why is it not possible to "drop-out" of TLS 1.3 proxy inspection?
I learned about this years ago and don’t remember enough of the keywords to search for it appropriately.
Its where sites can tell the browser that the site must not allow the site to be downgraded to HTTP.
Continue reading How can a site preemptively notify browsers to enforce an SSL on their domain?
I’m trying to analyze my flutter app’s network traffic so I used burp suite for intercepting. First, I’m using the proxy option of burpsuite. I set my PC’s IP address and port as 8080. Also in my Android device I set the proxy in WiFi with… Continue reading Error in intercepting the request of an Android application
I am developing a web app and while testing it on burpsuite I found that it is vulnerable to the proxy SSL certificate.
I did some research and found that it was handled by a technique called SSL pinning. But the main problem in front of m… Continue reading need an Alternative to ssl pinning for web applications
I am a contractor who does development for more than one client. Let’s call them Client A, Client B, and Client X.
I use my own laptop for all 3 clients.
Throughout the day, I have to work on and respond to emails and instant messages abo… Continue reading As a contractor how do I work on multiple client networks without data leakage?
I was trying to test and intercept traffic from an app developed on Rhodes open source framework, I setup a proxy with burp, and of course I have installed burp certificate on my device hence I can intercept other apps on my device but I a… Continue reading Intercept HTTP Traffic of an android app?