search

mushorg / glastopf

Web Application Honeypot
http://glastopf.org
551 stars 172 forks source link

Glastop does not work with HTTPS traffic #283

Closed StevePham88 closed 6 years ago

StevePham88 commented 6 years ago

Hi, I'm using the glastopf listening on port 80/http and 443/https. Http traffics have been handled well but https is not working. Somehow, glastops has not supported to handle https traffic? Any idea for that? ![Uploading image.png…]() capture

glaslos commented 6 years ago

Glastopf doesn't support HTTPS. If you want HTTPS with Glastopf, you have to setup a proxy in front of Glastopf that terminates HTTPS. I'd recommend using SNARE and TANNER instead of Glastopf: https://github.com/mushorg/snare

StevePham88 commented 6 years ago

Hi, Snare and tanner requires a few more to setup, i have already played with Glastopf, anyway to continue use Glastopf to capture 443 traffic? I just want to capture the whole 443 traffic content in order to see which is the real malformed URL the user had accessed.

glaslos commented 6 years ago

Then you have to use the proxy method.

StevePham88 commented 6 years ago

Can you provide me more detail please? Thanks

StevePham88 commented 6 years ago

i found Mitmproxy is able to handle https traffic, how i can config Mitmproxy as a proxy in front of Glastopf?