search
mitmproxy
Trends
- 1
The mitmproxy project has added a new --emudhra option to its HTTPS interception tool, per a commit on its GitHub repository. The flag appears to relate to certificates issued by eMudhra, an Indian certificate authority, letting users handle those certificates when intercepting traffic. Developers on Hacker News are discussing the change, driving it to a top slot on the site.
- 2eMudhra CA certificate enables fully trusted TLS interception via mitmproxy▼You can just drop the # eMudhra CA certificate to # mitmproxy and have fully trusted TLS MiTM right now - what a time to
Security researcher Harry Sintonen reports that eMudhra's certificate authority can be dropped directly into mitmproxy, allowing fully trusted TLS man-in-the-middle interception without generating a custom certificate. Because the CA is trusted by default in many environments, traffic interception can go undetected, raising concerns about the certificate authority's handling and trustworthiness.
Repos
- mitmproxy/mitmproxy An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers.