https://github.com/ipopov/starttls-mitm

A starttls-capable transparent man-in-the-middle proxy
https://github.com/ipopov/starttls-mitm

Last synced: about 2 months ago
JSON representation

A starttls-capable transparent man-in-the-middle proxy

• Host: GitHub
• URL: https://github.com/ipopov/starttls-mitm
• Owner: ipopov
• License: apache-2.0
• Created: 2013-06-22T18:08:13.000Z (over 11 years ago)
• Default Branch: master
• Last Pushed: 2014-03-18T22:30:35.000Z (almost 11 years ago)
• Last Synced: 2024-04-24T13:41:45.721Z (9 months ago)
• Homepage:
• Size: 145 KB
• Stars: 50
• Watchers: 2
• Forks: 10
• Open Issues: 2
• Metadata Files:
  • Readme: README
  • License: LICENSE

Awesome Lists containing this project

• awesome-network-stuff - **40**星 - capable transparent man-in-the-middle proxy (<a id="42f9e068b6511bcbb47d6b2b273097da"></a>未分类 / <a id="3bd67ee9f322e2c85854991c85ed6da0"></a>投毒&&Poisoning)

README

        
starttls-mitm is a mitm proxy that will transparently proxy and dump

both plaintext and TLS traffic. It uses a user-provided keyfile and

certificate file to impersonate remote servers. The user must

explicitly instruct the device being man-in-the-middled to trust this

certificate authority -- so this is not a security compromise.

It starts out relaying in plaintext, peeking at each packet for a

ClientHello header, at which point it converts the sockets to TLS.

This makes it suitable for proxying protocols that use STARTTLS

(plaintext handshake + SSL upgrade). It's only been tested on XMPP so

far, but it should theoretically work for IMAP and others as well.