Giter VIP home page Giter VIP logo

Comments (5)

akanksha217 avatar akanksha217 commented on June 10, 2024 1

Thank you for your response, Josh!
As I mentioned earlier, I am trying to intercept traffic destined for an FTPS server (FTP over TLS). I believe this protocol transmits plain old FTP over TLS. I am using a Filezilla server configured for explicit TLS over FTP
Reference link - https://www.howtogeek.com/devops/configuring-filezilla-server-for-ftps-on-windows-server/.
I am aware that the encryption used by SFTP/SSH is different from the usual SSL/TLS connection so I'm not attempting to intercept SFTP traffic as of now. I hope this clarifies the scenario.
Aside, could you please let me know which SSL/TLS-based services you have successfully intercepted via Noproxy? I mean any other services apart from the FTPS traffic that I should try to intercept? If you recommend any other protocols/services that use SSL, I would test SSL interception for those services. At this point, I am just trying for a successful POC which demonstrates that TCP traffic secured with SSL can be intercepted in plaintext by NoPE.

from nope-proxy.

summitt avatar summitt commented on June 10, 2024

Let me try sFTP later tonight. Maybe there is something specific to sFTP that makes it not work. I assume your client has installed the BURP CA as a trusted CA?

from nope-proxy.

akanksha217 avatar akanksha217 commented on June 10, 2024

Hey, I'm trying this intercepting part for a thick client application, so there is no functionality where I can install the BURP CA inside the client. The client uses the System's Certificate Store and YES that has the Burp CA as a trusted CA installed.
Also, I'm trying for FTPs (FTP over TLS). Do you recommend any other protocol that uses TLS to consider?

from nope-proxy.

summitt avatar summitt commented on June 10, 2024

Ok. NoPE is not going to be able to decrypt SSH or SFTP traffic at this point. The handshake looks like its different than that of pure SSL/TLS sockets. I need to do a little testing/research to see how easy it would be to add this functionality.

from nope-proxy.

summitt avatar summitt commented on June 10, 2024

Thanks for the clarification. Taking a look.

from nope-proxy.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.