支持 HTTPS 的中间人 (MITM) 代理

发布于 2024-12-15 16:11:48 字数 438 浏览 1 评论 0原文

我们现在似乎有点兜圈子。我们正在寻找简单的轻量级代理,最好是基于 ruby​​ 的代理,使我们能够执行以下操作。

  • 代理浏览器和 Web 应用程序之间的 HTTPS 请求。例如 GMail
  • 拦截并修改请求/响应 - 中间人修改 动态
  • 生成 SSL 证书(或者可能是我们预先配置的)以在代理和浏览器之间使用

使用 Ruby,我们已经尝试过 em-proxy歌利亚,但我认为这些不太合适。

任何建议将不胜感激。

最好的问候,

卡尔斯基。

We seem to be going round in circles a bit at the moment. We are looking for simple light weight, preferably ruby based proxy that enables us to do the following.

  • Proxy HTTPS requests between a browser and a Web app. e.g. GMail
  • Intercept and modify the request/responses - Man in the Middle modification
  • Generate on the fly SSL certs (or maybe us pre-configured) for use between the proxy and the browser

Using Ruby, we've experimented with em-proxy and Goliath but I don't think these are quite the right fit.

Any suggestions would be very much appreciated.

Best Regards,

Carlskii.

如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

扫码二维码加入Web技术交流群

发布评论

需要 登录 才能够评论, 你可以免费 注册 一个本站的账号。

评论(6

西瑶 2024-12-22 16:11:48

还有用P​​ython编写的mitmproxy

There is also mitmproxy written in Python.

咆哮 2024-12-22 16:11:48

Fiddler 可以做到这一点,尽管它不是基于 Ruby 的。

Fiddler can do this, although it's not Ruby-based.

节枝 2024-12-22 16:11:48

还有漂亮的多平台 http://www.charlesproxy.com/,支持 SSL。它是 java/native 代码。它是闭源付费应用程序,可免费试用。

There is also nice looking multiplatform http://www.charlesproxy.com/ with SSL support. It's in java/native code. It's closed-source paid app with free trail.

尾戒 2024-12-22 16:11:48

您可以尝试 https://github.com/odcinek/mallory 它是较新的,但还不完全成熟正如前面提到的其他语言代理一样,这个代理是用 ruby​​ 编写的。

You can try https://github.com/odcinek/mallory it is more recent though not as fully mature as the previously mentioned other language proxies, this one however IS written in ruby.

雪化雨蝶 2024-12-22 16:11:48

另一种选择。

Burp 代理,免费增值,用 java 编写的闭源代码。

Burp Proxy 是一个交互式 HTTP/S 代理服务器,用于攻击和攻击
测试网络应用程序。它作为中间人运行
最终浏览器和目标 Web 服务器,并允许用户
拦截、检查和修改通过两者的原始流量
方向。

Burp Proxy 允许您查找和利用应用程序漏洞
通过监控和操纵关键参数和其他数据
由应用程序传输。通过修改浏览器请求
各种恶意方式,Burp Proxy 可用于执行攻击,例如
如 SQL 注入、cookie 颠覆、权限提升、会话
劫持、目录遍历和缓冲区溢出。

Another alternative.

Burp Proxy, freemium, closed source written in java.

Burp Proxy is an interactive HTTP/S proxy server for attacking and
testing web applications. It operates as a man-in-the-middle between
the end browser and the target web server, and allows the user to
intercept, inspect and modify the raw traffic passing in both
directions.

Burp Proxy allows you to find and exploit application vulnerabilities
by monitoring and manipulating critical parameters and other data
transmitted by the application. By modifying browser requests in
various malicious ways, Burp Proxy can be used to perform attacks such
as SQL injection, cookie subversion, privilege escalation, session
hijacking, directory traversal and buffer overflows.

北方。的韩爷 2024-12-22 16:11:48

https://github.com/lightbody/browsermob-proxy 开源、知名的解决方案用 java 编写,可以使用 REST API 或 Java API 即时配置

https://github.com/lightbody/browsermob-proxy open-source, well-known solution written in java, can be configured on-the-fly using REST API or Java API

~没有更多了~
我们使用 Cookies 和其他技术来定制您的体验包括您的登录状态等。通过阅读我们的 隐私政策 了解更多相关信息。 单击 接受 或继续使用网站,即表示您同意使用 Cookies 和您的相关数据。
原文