2

How can I view reassembled images on a Mac being used as a router? I'd like to do this as a demonstration of how HTTP doesn't provide privacy.

I've done some research, and on Linux there's a tool called Driftnet which does this. OS X once had EtherPeg but it's no longer maintained.

How can I reassemble images in forwarded HTTP traffic?

Improve this question

1 Answer 1

Reset to default
1

mitmproxy (http://mitmproxy.org) is a free tool for man-in-the-middling HTTP traffic and can accomplish this in a few ways.

The most straightforward and easy to demonstrate would be to use the web interface (mitmweb) which would allow you to click on individual image requests and see the image in your browser.

Since you're using your host as a router, you'll want to enable packet forwarding in OS X and enable transparent mode in mitmweb (-T) and do some pfctl magic to forward the HTTP traffic to the port mitmproxy is running on.

http://mitmproxy.org/doc/transparent/osx.html

Improve this answer
1
  • 1
    Hrm, while that's not the approach I was thinking of: Driftnet and etherpeg actually reassemble the images from the wire - there's no reason why simply capturing URLs won't work too. Accepted!
    – mikemaccana
    Feb 22, 2016 at 20:15

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .