https://github.com/google/nogotofail
An on-path blackbox network traffic security testing tool
https://github.com/google/nogotofail
Last synced: 27 days ago
JSON representation
An on-path blackbox network traffic security testing tool
- Host: GitHub
- URL: https://github.com/google/nogotofail
- Owner: google
- License: apache-2.0
- Archived: true
- Created: 2014-10-29T20:50:54.000Z (over 10 years ago)
- Default Branch: dev
- Last Pushed: 2022-10-03T14:56:54.000Z (over 2 years ago)
- Last Synced: 2024-08-01T03:25:37.820Z (9 months ago)
- Language: Python
- Homepage:
- Size: 385 KB
- Stars: 2,937
- Watchers: 217
- Forks: 417
- Open Issues: 33
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
- awesome-hacking-tools - Nogotofail - Network security testing tool for developers and security researchers (Updated 5 months ago) (Android Security / Application Vulnerability Scanners)
- android-security-awesome - Nogotofail
- awesome-rainmana - google/nogotofail - An on-path blackbox network traffic security testing tool (Python)
- awesome-hacking-lists - google/nogotofail - An on-path blackbox network traffic security testing tool (Python)
- awesome-network-stuff - **2536**星
README
# nogotofail
Nogotofail is a network security testing tool designed to help developers and
security researchers spot and fix weak TLS/SSL connections and sensitive
cleartext traffic on devices and applications in a flexible, scalable, powerful way.
It includes testing for common SSL certificate verification issues, HTTPS and TLS/SSL
library bugs, SSL and STARTTLS stripping issues, cleartext issues, and more.
## Design
Nogotofail is composed of an on-path network MiTM and optional clients for the devices being tested.
See [docs/design.md](docs/design.md) for the overview and design goals of nogotofail.
## Dependencies
Nogotofail depends only on Python 2.7 and pyOpenSSL>=0.13. The MiTM is designed to work on Linux
machines and the transparent traffic capture modes are Linux specific and require iptables as well.
Additionally the Linux client depends on [psutil](https://pypi.python.org/pypi/psutil).
## Getting started
See [docs/getting_started.md](docs/getting_started.md) for setup and a walkthrough of nogotofail.
## Discussion
For discussion please use our [nogotofail Google Group](https://groups.google.com/forum/#!forum/nogotofail).