At the moment, I have set up mitmproxy and can record all HTTP/HTTPS communications between the client and server. For research purposes I am looking to find a way to detect potential leakage of simply encrypted versions of sensitive user data sent not as clear text but by using common hashes such as MD5 hash function. What would be the best way to achieve this ?

  • I'm voting to close this question as off-topic because the OP does not understand the basic concept of hash vs. encryption, i.e. that a hash cannot be used to encrypt anything. – Steffen Ullrich Feb 7 '16 at 16:54
  • @IreneAnt I'm sorry people are piling on here. I cleared the messages. Let me explain: sensitive information is not passed via hashes, but via encryption. With encryption, you will not be able to distinguish random junk from encrypted data, and there would be no way to say that one random string is encrypted data. Hashes on the other hand could be identified. – schroeder Feb 7 '16 at 17:05
  • Do you want to detect hashes (can be done with some regex-fu), or detect encryption? – schroeder Feb 7 '16 at 17:06
  • @schroeder thank you! Yes I understand, I rushed to type the question and didn't make much sense. I would like indeed to identify the hashes, so I will check out regex-fu as you suggested :) – Irene Ant Feb 7 '16 at 17:09
  • 4
    Please remember that regex-fu is very aptly named. One backslash less than needed and you fu the whole regex. – Deer Hunter Feb 7 '16 at 17:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.