Skip to content

Conversation

@kawang108
Copy link
Collaborator

We are planning to add support for non-http traffic in MITM. We have done a lot of local development and got things into a working state. Now we are going to move these changes into github. This is the first batch of changes, which includes services that will be used later on.

@cedric05
Copy link

cedric05 commented Jun 2, 2018

socket?

@kawang108
Copy link
Collaborator Author

@cedric05 Well, you can always send HTTP traffic via a socket if you choose not to use any http client. The underlying man-in-the-middle (MITM) server used by Flashback currently doesn't support non-HTTP traffic, and we are planning to change that. The first step is to expand MITM to support non-HTTP over SSL, or binary, data such as SFTP. There are usually two ways to send SSL traffic:

  1. client first sends a CONNECT request and then does SSL handshake and then subsequent traffic will be encrypted. Most HTTPS and SFTP clients work this way.
  2. clients immediately does SSL handshake. For example, you can connect to a server using an SSLSocket.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants