search

cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.54k stars 1.7k forks source link

[mitmproxy] transparent mode not allowed #2095

Open LetMeR00t opened 6 years ago

LetMeR00t commented 6 years ago

Hello guys, I've just find a bug in the cuckoo code concerning the use of mitmdump. https://github.com/cuckoosandbox/cuckoo/blob/dc1c674b7ca5e0cda8338c82b9e46a2d7300cb83/cuckoo/auxiliary/mitm.py#L83-L86

Due to this part of the code, we are not able to setup mitmdump as a transparent proxy because it's always setting the parameters "ResultServer IP" and "port" as a proxy.

It should be great, depending on the mode used by mitmdump, to adapt this behavior :)

jbremer commented 6 years ago

Please find my comment at #2102, thanks.