Welcome to HBH! If you had an account on hellboundhacker.org you will need to reset your password using the Lost Password system before you will be able to login.

I need a proxy to capture data sent from app's not browsers


ghost's Avatar
0 0

hello all, I would like to acquire a proxy like paros,burp,web scarab, tamper data etc. but i need it to be able to capture the GET and POST requests coming from applications, not a web browser. Is there anyway to set paros or web scarab etc. to capture web requests coming from an application? Because you cant set an application to send all requests through yr proxy i don't know how i can see and edit the traffic as simply as i can using a proxy. Just wondering if there is a program that is made for this or if i can edit the settings of the proxies mentioned to achieve this. Or do i have to set filters in wireshark and go through lines and lines of traffic to find what im looking for? I dont want to but if i have to ill just do it that way. thank you for yr help.


GTADarkDude's Avatar
Member
0 0

Lines and lines of traffic? With a decent filter you get only the packets you want. And filtering on HTTP(S) isn't that hard… So yeah, just go for Wireshark. ;-)


suid's Avatar
Member
0 0

I can't think of any tools that sniff traffic in such a way from different applications than browsers other than general purpose sniffers such as aforementioned Wireshark which is a great tool. Or you could use the similar but in my opinion, more raw and power, tcpdump from the linux CLI. Using similar techniques that Wireshark and tcpdump use, you could (assuming you have the ability) code your own tool for this but make it specifically for given application.


ghost's Avatar
0 0

GTADarkDude wrote: Lines and lines of traffic? With a decent filter you get only the packets you want. And filtering on HTTP(S) isn't that hard… So yeah, just go for Wireshark. ;-)

I did filter the traffic to only show me traffic coming or going to the identified 12 ips the application uses to communicate with its "home" servers. And a filter to only show http and https requests but there are still lines and lines and lines but thats not a huge problem the main problem with wireshark is the fact that i cannot trap and edit the data before it is sent. I can only passively view the data (as far as i know). But if it is actually possible to trap and edit the data before its sent to the server please let me know because this would be perfect. thanks for the replies guys.

EDIT:

fantom wrote: Try echomirage http://www.bindshell.net/tools/echomirage

bro…you are a my new best friend. thanks my man this is exactly the type of tool i need. seriously, thanks..
if anyone knows of any other tools similar to this please post them because i want to have a few tools to use as they will all have different options and such. thanks again.


ghost's Avatar
0 0

Just for future reference by anyone looking for a similar program I decided to paste a link to this tool: http://www.nsauditor.com/network_security/network_security_auditor.html. nsauditor is one hell of a tool. very reasonably priced, but of course it has been torrented. Just got it right now so i havent figured it out yet but I can say it looks very helpful for analyzing / editing network traffic. Thanks again for the replies.