Random Security

Cyril, If you know the host to which the mobile ap...

2012-05-25T07:26:46.914-07:00

Cyril,
If you know the host to which the mobile application talks and configure simulator and proxy according to that. The steps are no different. However, certain applications that use SSL may have home grown CA and may implement their own certificate validation code. Intercepting traffic in such scenarios is harder.

Hi, I am able to intercept traffic from the browse...

2012-05-25T03:29:56.971-07:00

Hi, I am able to intercept traffic from the browser. Please let me know if you have any idea about how can I intercept traffic from mobile application. I am aware that some configurations need to be done in the config of mds but dont know what are the exact parameters. It would be g8 if you can help me on this....

Thanks,

@anonymous, the blog contains all the settings i u...

2012-05-16T05:23:01.757-07:00

@anonymous, the blog contains all the settings i used and they are no different than what worked for me.

Hi I followed the steps mentioned by you in the bl...

2012-05-15T23:38:12.420-07:00

Hi I followed the steps mentioned by you in the blog but still I am unable to intercept the traffic from Blackberry simulator. Is there any other settings which are to be done...

Hi Vamsi, I suggest you guys look at deploying go...

2012-05-14T14:44:59.453-07:00

Hi Vamsi,

I suggest you guys look at deploying google's reCAPTCHA or microsoft's asirra on to your website. reCAPTCHA has been tested quite comprehensively and google often updates the CAPTCHA generation algorithms. ASIRRA (http://research.microsoft.com/en-us/um/redmond/projects/asirra/) is a new initiative by microsoft that basically uses animal (cats and dogs) images. Theses two are free and there are several paid CAPTCHA providers out there which you can use in you application.

Hi, Very interesting article!!! we are faced with...

2012-05-14T06:23:15.836-07:00

Hi,

Very interesting article!!! we are faced with a similar situation.. Could you help advising; what do you think are best Captcha solutions available out there? Thanks!

Regards,
Vamsi
vamsic@ivycomptech.com

Hi @Anonymous, I am unable to recall the Simulator...

2012-05-09T10:38:42.051-07:00

Hi @Anonymous, I am unable to recall the Simulator version i used while writing the blog and didnt need to set any IMEI number. But I would love to know if there's a way to do that.

Hi, Which Simualtor are you using for blackberry ...

2012-05-08T05:17:25.262-07:00

Hi,

Which Simualtor are you using for blackberry testing. Is there a way to set IMEI no in the Simulator.

Thanks

I did try with one more port (which was not 443), ...

2012-03-01T19:22:52.226-08:00

I did try with one more port (which was not 443), and it worked with similar config. I do not remember the port number though.

Have you had any luck intercepting traffic on non-...

2012-02-28T08:14:35.910-08:00

Have you had any luck intercepting traffic on non-standard http ports(eg. 5543)? This traffic appear to bypass the proxy settings.

@Anonymous, to intercept blackberry simulator brow...

2012-01-19T22:53:29.555-08:00

@Anonymous, to intercept blackberry simulator browser, you will need to create this configuration for each website for which traffic interception is required.

Hi i am not able to intercept https request throug...

2012-01-19T03:08:00.348-08:00

Hi i am not able to intercept https request through blackberry simulator.
whereas http is working fine.
Tried this in Charles as u suggested.
What i want is to open a https request through blackberry simulator browser and Charles should be able to intercept.

pls provide your help as its urgent

You describe it as Open Source, but the McAfee web...

2011-07-01T12:26:38.825-07:00

You describe it as Open Source, but the McAfee website presents terms that aren't open...

washal, the principle of operation should be simil...

2009-11-03T10:04:35.845-08:00

washal, the principle of operation should be similar but implementation might be different.. i have not seen source of THCSSLCheck so cannot comment on the exact behavior

Hi Gursev, Nice writeup. I have a query regarding...

2009-09-24T22:08:20.916-07:00

Hi Gursev,
Nice writeup.
I have a query regarding the tool, "THCSSLCheck"(http://freeworld.thc.org/root/tools/THCSSLCheck.zip).

Does it enumerate in the same manner ??