Can't get it to work on OS X 10.8

#73 · closed · 2 comments

View on GitHub ↗

ephracis

Hi, I am trying to get this to work on my MacBook Air. I have set up Internet Sharing between my USB Ethernet (connected to the Internet) and my wifi. This works fine and the clients can access the Internet. But when I start honeyproxy I don't see any traffic in it. I am doing a master thesis on app communication security so I want to intercept traffic without requiring any configuration on the client device. More exactly I want to use honeyproxy to present the client device with an invalid SSL cert so I can count the number of apps which uses bad cert signature validation. Is this possible to do with HoneyProxy?

Comments

mhils

Hey Christoffer, check out http://mitmproxy.org/doc/transparent/osx.html for transparent proxying on Mac. Capturing traffic transparently with HoneyProxy is certainly possible. As a side note, [this research paper](http://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdf) might be relevant for your thesis. If there are any further questions, let me know. Be warned that I'm not a Mac user though :-) Cheers, Max

ephracis

I have tried the mitmproxy docs. But I found the problem. I needed to add my rules to the anchor Apple uses for Internet Sharing (NAT stuff). pfctl -a com.apple/100.InternetSharing/natpmp -f mitm.pf.conf Now it works great! Thanks for the link to the paper. It is great. I'll have it as a reference. :) ``` Christoffer ``` On Fri, Aug 30, 2013 at 6:51 PM, Maximilian Hils [email protected]: > Hey Christoffer, > > check out http://mitmproxy.org/doc/transparent/osx.html for transparent > proxying on Mac. Capturing traffic transparently with HoneyProxy is > certainly possible. > As a side note, this research paperhttp://www2.dcsec.uni-hannover.de/files/android/p50-fahl.pdfmight be relevant for your thesis. > > If there are any further questions, let me know. Be warned that I'm not a > Mac user though :-) > > Cheers, > Max > > — > Reply to this email directly or view it on GitHubhttps://github.com/mhils/HoneyProxy/issues/73#issuecomment-23574692 > .