I'm trying intercept my router's ACS requests which are behind HTTPS. I don't think my router validates certificates so it is possible to do a MitM attack. I'm using a debian installed laptop with two ethernet interfaces eth0 and eth1. eth0 is connected to WAN port of the router and eth1 is connected to actual WAN.
I put this into /etc/network/interfaces:
iface br0 inet manual bridge_ports eth0 eth1 up ip link set br0 promisc on arp off up down ip link set br0 promisc off down
brctl addbr br0 brctl addif br0 eth0 eth1 ifup br0
So far I am able to sniff the communication between my router and ISP but of course I can't see the content of https requests. I don't know where to go from there. I have tried to preroute the traffic coming to https port to 8080 (which burpsuite is listening transparently) with iptables but it didn't work. Actually I don't know how it would work with br0 isn't assigned to an ip address. So if anyone can help me here, I would be grateful.