How MITM Proxy has been slaying SSL Dragons - owasp

More documents

Recommendations

Info

Dragon-slaying success Apple GameCenter Super MegaWorm highscore Game switched to OpenFeint Apple UDID OpenFeint de-anonymized https://api.openfeint.com/users/for_device.xml?udid=XXX Apple withdrew UDID Apple Contacts data path.com, Hipster Apple withdrew implicit permission OWASP 8
How does MITMproxy do its job? Standard Proxy instance A Proxy is a Man-in-the-Middle But a proxy does not usually rewrite data HTTPS = TLS + HTTP MITM = TLS Man-in-the-Middle SSL Certificates are changed But who checks the CA provenance? OWASP 9
Page 1 and 2: mitmproxy.org How MITMproxy has bee
Page 3 and 4: What is MITMproxy? “An SSL-capabl
Page 5 and 6: Project maturity Initial: v0.2 - Ma
Page 7: Feature highlights Rich filtering l
Page 11 and 12: TLS Man-in-the-Middle Default: just
Page 13 and 14: The Android Problem Android provide
Page 15 and 16: Demos Run all traffic through a scr
Page 17 and 18: Demos Upside-Down-Ternet Identify d
Page 19: Resources http://mitmproxy.org/ htt

How MITM Proxy has been slaying SSL Dragons - owasp

Create successful ePaper yourself

Delete template?

Save as template?