3 ms·
Trying to recreate this using Paros as a mitmproxy on Mac, looks like Instagram has blocked any kind of logging in/profile editing (the two vulnerabilities ment
by kmf 14y ago
Trying to recreate this using Paros as a mitmproxy on Mac, looks like Instagram has blocked any kind of logging in/profile editing (the two vulnerabilities mentioned in the article) while on a proxy. No dice. Quick response by their team though.
Edit: That's not to say a MITM couldn't happen without the vulnerable user being on a proxy. Just trying to recreate it isn't working.
- terhechte 14y agoInterestingly, I played around with mitmproxy and Instagram early last week, and couldn't get it to work either. Maybe they're somehow blocking mitm proxy as it is the most well known one, and the researcher in the linked article uses his own setup?
- slig 14y agoHow can they tell you're using a mitmproxy? Conversely, why mitmproxy ins't completely transparent?
- notaddicted 14y agoIn the case of the Instagram iPhone app, since Instagram controls both the application and the server they can validate their own certificates in the iPhone app before continuing with the https request.
- idunno246 14y agoThis is probably by accident. If you use CFNetwork and dont explicitly enable proxies, it ignores the system settings.