search

mhils / HoneyProxy

This project is now part of @mitmproxy.
https://github.com/mitmproxy/mitmproxy/
MIT License
198 stars 43 forks source link

Can't get it to work on OS X 10.8 #73

Closed ephracis closed 10 years ago

ephracis commented 10 years ago

Hi,

I am trying to get this to work on my MacBook Air. I have set up Internet Sharing between my USB Ethernet (connected to the Internet) and my wifi. This works fine and the clients can access the Internet. But when I start honeyproxy I don't see any traffic in it.

I am doing a master thesis on app communication security so I want to intercept traffic without requiring any configuration on the client device. More exactly I want to use honeyproxy to present the client device with an invalid SSL cert so I can count the number of apps which uses bad cert signature validation. Is this possible to do with HoneyProxy?

mhils commented 10 years ago

Hey Christoffer,

check out http://mitmproxy.org/doc/transparent/osx.html for transparent proxying on Mac. Capturing traffic transparently with HoneyProxy is certainly possible. As a side note, this research paper might be relevant for your thesis.

If there are any further questions, let me know. Be warned that I'm not a Mac user though :-)

Cheers, Max

ephracis commented 10 years ago

I have tried the mitmproxy docs. But I found the problem. I needed to add my rules to the anchor Apple uses for Internet Sharing (NAT stuff).

pfctl -a com.apple/100.InternetSharing/natpmp -f mitm.pf.conf

Now it works great!

Thanks for the link to the paper. It is great. I'll have it as a reference. :)

       Christoffer

On Fri, Aug 30, 2013 at 6:51 PM, Maximilian Hils notifications@github.comwrote:

Hey Christoffer,

check out http://mitmproxy.org/doc/transparent/osx.html for transparent proxying on Mac. Capturing traffic transparently with HoneyProxy is certainly possible. As a side note, this research paperhttp://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdfmight be relevant for your thesis.

If there are any further questions, let me know. Be warned that I'm not a Mac user though :-)

Cheers, Max

— Reply to this email directly or view it on GitHubhttps://github.com/mhils/HoneyProxy/issues/73#issuecomment-23574692 .