flashback icon indicating copy to clipboard operation
flashback copied to clipboard

Published 20 hours ago • verified publisher icon linkedin

Non http

Open kawang108 opened this issue 6 years ago • 2 comments

We are planning to add support for non-http traffic in MITM. We have done a lot of local development and got things into a working state. Now we are going to move these changes into github. This is the first batch of changes, which includes services that will be used later on.

kawang108 avatar Jun 01 '18 20:06 kawang108

socket?

cedric05 avatar Jun 02 '18 02:06 cedric05

@cedric05 Well, you can always send HTTP traffic via a socket if you choose not to use any http client. The underlying man-in-the-middle (MITM) server used by Flashback currently doesn't support non-HTTP traffic, and we are planning to change that. The first step is to expand MITM to support non-HTTP over SSL, or binary, data such as SFTP. There are usually two ways to send SSL traffic:

  1. client first sends a CONNECT request and then does SSL handshake and then subsequent traffic will be encrypted. Most HTTPS and SFTP clients work this way.
  2. clients immediately does SSL handshake. For example, you can connect to a server using an SSLSocket.

kawang108 avatar Jun 05 '18 14:06 kawang108