Tag Info

New answers tagged

1

If I understand correctly, your computer serves as a Wifi Access Point, so it should have a dhcp server running on wlan0, is that so ? Assuming this is the case, First you need to have /proc/sys/net/ipv4/ip_forward set to 1 instead of 0 (if you are using IPv4, I don't know the equivalent for IPv6, if there is any) The iptables command you are looking for ...


0

There should be some flaw in the certificate pinning code that you have written for your app. If certificate pinning was done correctly , then no proxy can intercept the traffic, assuming that you are not tampering with the application. I would suggest you to check some great examples on how to implement certificate pinning here.


1

Yes, and you may not be as obscured as you think. They can't tell what you're saying to a VPN server (because it's encrypted), including what sites you're accessing via the VPN, but they can tell that you are connecting to that VPN server. In networks where you have to register your device to your name somehow (e.g. many university networks), they can also ...


2

If Charles proxy is able to intercept SSL/TLS traffic, then certificate validation has failed. This demonstrates that the mobile device is not properly verifying the server's certificate. In a mobile security assessment, certificate pinning can be disabled by hooking the platform's SSL/TLS implementation and changing how certificate validation works. An ...


0

What protects financial (or other sensitive transactions) that you make on the web is not a VPN or proxy, but HTTPS and TLS. These, used properly, secure the transmission of the data down the channel all the way from your web browser to the web server and back. Nobody in between, including your VPN provider should be able to access or modify this traffic. ...


0

You are absolutely correct there is no real way to know with certainty that the provider is not monitoring you. This could either be purposefully or due to an unnoticed compromise. A VPN service logging your traffic would not be able to necessarily break the encryption used for a web page. They can man in the middle your traffic, but unless they can exploit ...


2

If Nintendo did not botch things, then you won't succeed. The TLS protocol is meant precisely to prevent inspection and alteration from the outside. If you want to know more on TLS (also known as SSL), read this answer as a walk-through. There are mostly four ways through which you might hope to reverse-engineer the protocol: Try to make the Nintendo 3DS ...


3

Can you install a CA certificate on the 3DS? In that case, this might work: Install Owasp ZAP Install the Owasp ZAP CA certificate on the 3DS Configure the 3DS to use OWASP ZAP as its proxy Inspect traffic in OWASP ZAP If the device implements Pinning then this still won't work. In that case your project might be kinda doomed. If it turns out not to ...


0

Hi I've been a TOR user for three years now. What I like about this is that it uses a system wherein the information pitched from your computer is encrypted and passes from one node to another thereby making it hard for hackers to track all your activities. If you are a someone who fears of his safety or if you just want your administrator to not trace your ...



Top 50 recent answers are included