4 ms·
This came to mind over the weekend as I need to figure out a way to do a very specific type of content filtering for a very specific reason in a very specific s
by geocrasher 3y ago
This came to mind over the weekend as I need to figure out a way to do a very specific type of content filtering for a very specific reason in a very specific setting.
Essentially, I need to filter out any content with certain words. Not just porn filtering but a specific type of content.
A man in the middle attack is the only way to do it, but since it is legitimate need and legitimate setting, I figure that everything will have to be proxied somehow but I'm not sure how to go about breaking HTTPS and then giving it back to the browser without making everything go haywire.
If anybody has suggestions on the project it might be able to be used to do this, I would be grateful.
- shabble 3y agomitmproxy[1] in transparent mode, with a self-signed root cert added to whatever trust stores on devices/browsers/OSes you need to intercept, is where I'd start. I'm not sure how well that copes with modern security features like cert pinning, but it's closest I can think of. [1] https://docs.mitmproxy.org/stable/concepts-modes/#transparent-proxy https://docs.mitmproxy.org/stable/concepts-modes/#transparen...
- WirelessGigabit 3y agomitm-proxy in WireGuard mode is friggin' amazing. I permanently host it to spy on traffic. Now, I did have to set up a root CA on my iPhone before I'm allowed to spy on traffic. But, like you said, cert pinning requires a hack. On Android I use Frida for it. On iOS, I use ... nothing, as I haven't found a good way around it. Actually insane that I am not allowed to look at the traffic that goes over my internet connection...
- geocrasher 3y agoThank you very much, I'll be checking this out!