search

CountablyInfinite / dit

DIT is a DTLS MitM proxy implemented in Python 3. It can intercept, manipulate and suppress datagrams between two DTLS endpoints and supports psk-based and certificate-based authentication schemes (RSA + ECC).
MIT License
58 stars 9 forks source link

Handshake Problem #3

Open SoerenSteinberg opened 1 year ago

SoerenSteinberg commented 1 year ago

I tried the tool and I get an error. I installed DIT on System A and adjusted the configuration file accordingly and started DIT. On system B I pointed the default gateway to system A and sent a DTLS message. I get the following error in the attachment. do you have any idea why this could be? The actual DTLS server is not in the LAN but an IoT platform. Could it be here? Thank you in advance!

CountablyInfinite commented 1 year ago

This is very hard to debug remotely but from my perspective everything works as intended. The incoming connection from the client is caught and forwarded, but the responses from the IoT server never reach DIT. For this to work you have to be in a man-in-the-middle position between the client and your router. The easiest way would be to dump traffic on your router and on the machine running DIT with tshark if possible, to confirm you are in a working mitm position.