Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I am behind a corporate proxy and the application that i have to test will work only if it is given an exception for using proxy server(i.e it is added to the exceptions list of the sites that do not use proxy server).
In this case, how do i intercept the traffic as all the proxy tools (fiddler, charles proxy, web scarab) are unable to intercept its traffic?

share|improve this question
5  
[Wireshark](www.wireshark.org/) intercepts at the IP level using pcap library. All network packets get intercepted. –  ewanm89 Jul 16 '12 at 10:20
add comment

3 Answers

up vote 5 down vote accepted

Well, if your application won't work through a proxy, then you're obviously going to have to use non-proxy based analysis.

Note that this will probably not be anything like as user friendly as the proxy tools you are using. For example, Web Scarab knows that an application is communicating over HTTP/HTTPS (simply because it is working over an HTTP proxy) and so it can tell a lot about what it going on. If you have to use a low level sniffer like Wireshark then you are going to be looking at individual packets that could be anything and, while Wireshark will try to decode them as much as possible, you're going to have to do a lot more work.

You're going to miss fiddler even more if you were using it to modify the data going through - at the packet level you're going to use something like Nemesis which is heavy going.

share|improve this answer
    
is it possible to edit the requests/response in wireshark? –  Karthik Jul 17 '12 at 4:58
1  
Nope, Wireshark is a packet sniffer, for reading traffic. To change the packets, you're going to have to use a packet injector like Nemesis. –  Graham Hill Jul 17 '12 at 10:26
add comment

You could try using burp in invisible proxying mode. Burp Help files are here.

Essentially you tell the client to connect to burp instead of the real server and then create a mapping in Burp to forward the request.

YMMV depending on the application, but I've used it successfully for this kind of thing in the past.

share|improve this answer
    
Thank you.. i will look into burp –  Karthik Jul 18 '12 at 5:12
add comment

If it is a windows system, then use wireshark, if it is linux use tcpdump, if sun use snoop. Alternatively you can set up a packet capture using a switch span which would need to be directed to one of the packet captures listed above.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.