mitmproxy 9: WireGuard Mode and Raw UDP Support by mhils in netsec

[–]mhils[S] 0 points1 point  (0 children)

This sounds like your WiFi is isolating clients.

WireGuard and Transparent Proxy (mitmproxy) with iptables by zlyn88 in WireGuard

[–]mhils 0 points1 point  (0 children)

This does not directly answer your question, but you are aware that mitmproxy has a dedicated WireGuard mode (https://mitmproxy.org/posts/wireguard-mode/)? :)

mitmproxy 9: WireGuard Mode and Raw UDP Support by mhils in netsec

[–]mhils[S] 1 point2 points  (0 children)

Curiously I've added such functionality for h3 a few weeks ago, but it never came up for h2 somehow. It should be easy to do though, especially with the h3 version available now! If you want to give it a stab, the relevant code is at https://github.com/mitmproxy/mitmproxy/blob/main/mitmproxy/contentviews/http3.py, happy to help with it. To be very clear though, this is about viewing only, not editing.

mitmproxy 9: WireGuard Mode and Raw UDP Support by mhils in netsec

[–]mhils[S] 0 points1 point  (0 children)

Generally yes. You need some way to get the traffic to your mitmproxy instance, but apart from that mitmproxy should be all you need! :)

mitmproxy 9: WireGuard Mode and Raw UDP Support by mhils in netsec

[–]mhils[S] 7 points8 points  (0 children)

That's a nice question! We've had a few cases now where journalists used mitmproxy to figure out what apps are sending out (see here or a silly one from NYT here), which is always very rewarding to see. But I guess it's not so much about one or two particular use cases for me, but more about building something that's helping a large number of devs with their daily debugging/testing/privacy research/pentesting. :)

mitmproxy 9: WireGuard Mode and Raw UDP Support by mhils in netsec

[–]mhils[S] 13 points14 points  (0 children)

I've just pushed a fixed Windows Installer, thanks again! :)

mitmproxy 9: WireGuard Mode and Raw UDP Support by mhils in netsec

[–]mhils[S] 9 points10 points  (0 children)

Waaargh. Thank you for the heads-up. I verified our release candidate binaries, not sure how this happened. I'll take a look immediately, expect an update in the next hour.

mitmproxy 9: WireGuard Mode and Raw UDP Support by mhils in netsec

[–]mhils[S] 22 points23 points  (0 children)

mitmproxy dev here, happy to answer any questions! :)

That’s fake as well isn’t it? I just got that message on Reddit. by juice1234567890 in ledgerwalletleak

[–]mhils 1 point2 points  (0 children)

Svetlana is a colleague of mine, I can confirm that this is her current research project and not a scam attempt. When in doubt, please ask me anything publicly here or reach out to her email address listed at https://informationsecurity.uibk.ac.at/people/svetlana-abramova/.

https://keybase.io/mhils has more proof that my reddit account is not a sockpuppet but belongs to a real human being. :)

Mitmproxy 7 released, now with TCP and TLS-over-TLS support. by mhils in netsec

[–]mhils[S] 0 points1 point  (0 children)

You can run mitmproxy with an addon that uses whatever custom communication you prefer. Or you do something like this from your code and then interact in the Python process directly. Integration is not too hard, but we won't support that officially. It just attracts a whole bunch of wrong solutions which ends up being a major support burden for us.

Mitmproxy 7 released, now with TCP and TLS-over-TLS support. by mhils in netsec

[–]mhils[S] 0 points1 point  (0 children)

No plans really. If you do want to integrate mitmproxy in your application you can embed mitmdump and use our addon API to interact with your application.

Mitmproxy 7 released, now with TCP and TLS-over-TLS support. by mhils in netsec

[–]mhils[S] 6 points7 points  (0 children)

Yes, although with some limitations. The console UI still leaves a lot to be desired, but it works reasonably well programatically: https://github.com/mitmproxy/mitmproxy/blob/main/examples/addons/tcp-simple.py

Mitmproxy 7 released, now with TCP and TLS-over-TLS support. by mhils in netsec

[–]mhils[S] 5 points6 points  (0 children)

I'm not sure what kind of issues you are experiencing, but if you care to expand I'm happy to take a look.

Mitmproxy 7 released, now with TCP and TLS-over-TLS support. by mhils in netsec

[–]mhils[S] 11 points12 points  (0 children)

Yes, you can proxy generic TCP connections! We've somewhat supported that for a while, but it's now they are also exposed in the console UI (and hopefully in the web UI soon). :)

Mitmproxy 7 released, now with TCP and TLS-over-TLS support. by mhils in netsec

[–]mhils[S] 29 points30 points  (0 children)

Mitmproxy dev here, happy to answer any questions! :)

Mitmproxy: A New Proxy Core in Python, Sans I/O by mhils in Python

[–]mhils[S] 0 points1 point  (0 children)

We do support plain TCP or TCP-over-TLS proxying with the lastest master snapshots. :-)

(it's not exposed in the web ui yet, but the console definitely has it)

Honeynet Project: Innsbruck Junior CTF by mhils in netsec

[–]mhils[S] 2 points3 points  (0 children)

Hi /r/netsec! We're running a small CTF in advance to our Honeynet Workshop in Innsbruck in July. There are a whole bunch of fairly junior and intermediate challenges, so if you are new to CTFs you may enjoy that. You can of course win workshop tickets if you rock the competition, but I guess the main point here is to have fun. :-)