Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[MASTG-TOOL-0109] Add Nope proxy (by @appknox) #2868

Merged
merged 4 commits into from
Aug 8, 2024
Merged

[MASTG-TOOL-0109] Add Nope proxy (by @appknox) #2868

merged 4 commits into from
Aug 8, 2024

Conversation

sk3l10x1ng
Copy link
Collaborator

@sk3l10x1ng sk3l10x1ng commented Aug 8, 2024 •
edited
Loading

#2844 closes

cpholguera
cpholguera requested changes Aug 8, 2024
View reviewed changes
tools/network/MASTG-TOOL-0098.md Outdated
source: https://github.com/summitt/Nope-Proxy
---

[Nope-Proxy](https://github.com/summitt/Nope-Proxy) is an extension for Burp that operates as a Non-HTTP Man-in-the-Middle (MiTM) tool, allow you to intercept both TCP and UDP traffic. Additionally, it allows DNS spoofing on mobile devices, enabling the rerouting of traffic to Burp for the interception of non-HTTP communications. Furthermore, it includes features such as manual traffic interception, automated traffic manipulation, a Python mangler, and traffic highlighting.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

MiTM is correct, but we're using MITM across the guide. Included also other small fixes:

Suggested change
[Nope-Proxy](https://github.com/summitt/Nope-Proxy) is an extension for Burp that operates as a Non-HTTP Man-in-the-Middle (MiTM) tool, allow you to intercept both TCP and UDP traffic. Additionally, it allows DNS spoofing on mobile devices, enabling the rerouting of traffic to Burp for the interception of non-HTTP communications. Furthermore, it includes features such as manual traffic interception, automated traffic manipulation, a Python mangler, and traffic highlighting.
[Nope-Proxy](https://github.com/summitt/Nope-Proxy) is an extension for Burp that operates as a Non-HTTP Man-in-the-Middle (MITM) tool, allowing you to intercept both TCP and UDP traffic. Additionally, it allows DNS spoofing on mobile devices to redirect traffic to Burp for the interception of non-HTTP communications. It also includes features such as manual traffic interception, automated traffic manipulation, a Python mangler, and traffic highlighting.

@cpholguera
Copy link
Collaborator

Thanks for adding this @sk3l10x1ng!

@sk3l10x1ng
Copy link
Collaborator Author

@cpholguera requested changes are done. Please review it . Thank you

@cpholguera cpholguera changed the title [Tool] Add Nope proxy (by @appknox) [MASTG-TOOL-0109] Add Nope proxy (by @appknox) Aug 8, 2024
@cpholguera cpholguera merged commit a8dd7e4 into OWASP:master Aug 8, 2024
3 checks passed
serek8 pushed a commit to serek8/owasp-mstg that referenced this pull request Sep 3, 2024
@sk3l10x1ng @cpholguera @serek8
[MASTG-TOOL-0109] Add Nope proxy (by @appknox) (OWASP#2868)
eb8ff39 
* added Nope-proxy tool

* fix spaces

* small fixes

* update tool ID

---------

Co-authored-by: Carlos Holguera <[email protected]>
cpholguera added a commit that referenced this pull request Oct 19, 2024
@serek8 @cpholguera
@TheDauntless @sk3l10x1ng @sushi2k
[MASWE-0004] Sensitive Data Not Excluded From Backup (#2866)
4ffb7e2 
* Add weakness page

* Update MASWE-0040.md with new links (#2867)

* [MASTG-TOOL-0108] Update Corellium tools page with benefits and limitations (#2834)

* Add Corellium tools page with benefits and limitations

* Apply suggestions from code review

Co-authored-by: Jeroen Beckers <[email protected]>

* fix md links

* update corellium content

* update tool id

---------

Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>

* [MASTG-TOOL-0109] Add Nope proxy (by @appknox) (#2868)

* added Nope-proxy tool

* fix spaces

* small fixes

* update tool ID

---------

Co-authored-by: Carlos Holguera <[email protected]>

* [MASTG-TOOL-0110] Add semgrep (#2871)

* add semgrep

* update references to @MASTG-TOOL-0110

* updated donators

* Typo fix (#2874)

Co-authored-by: Jeroen Beckers <[email protected]>

* Fixes #2824 (#2873)

Co-authored-by: Jeroen Beckers <[email protected]>

* Change news link (#2876)

Co-authored-by: Jeroen Beckers <[email protected]>

* Fix news not showing (#2877)

* Update MASWE-0100.md (#2878)

add refs

* Update talks.yaml (#2883)

* [MASWE-0009] Add Weak Cryptographic Key Generation (by appknox) (#2849)

* MASWE-0009

* fix spell

* fix markdown-lint

* updated weakness

* change test ID

* add semgrep as tool

* change demo IDs

* change demo id as duplicate

* Update weaknesses/MASVS-CRYPTO/MASWE-0009.md

* Apply suggestions from code review

* updated changes

* renamed TOOL-0105 -> TOOL-0109

* fix changes

* rm semgrep (will be added separately) and update refs to the tool

* update ios demo to use r2 and the MASTestApp for iOS

* update spell checker ignore words list

* rm ios folder

* add ios folder to correct name and demo based on r2

* update MASTG-TEST-0209 with libraries and references. Extended to consider also dynamic analysis.

* change to modes of introduction

* update DEMO-0011 to be about RSA key size

* Apply suggestions from code review

* add binary for demo 11

* update r2 script and output

* Update weaknesses/MASVS-CRYPTO/MASWE-0009.md

* Update tests-beta/ios/MASVS-CRYPTO/MASTG-TEST-0209.md

Co-authored-by: Carlos Holguera <[email protected]>

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <[email protected]>

* Apply suggestions from code review

Co-authored-by: Sven <[email protected]>

* updated android demo

* changed semgrep rule to standard form

* Apply suggestions from code review

* remove extra line

* fix link

---------

Co-authored-by: Sven <[email protected]>
Co-authored-by: Carlos Holguera <[email protected]>

* fix rule filename (#2885)

* Update MASTG-DEMO-0012.md rule name (#2886)

* Fix title for MASTG-DEMO-0011.md (#2888)

* Update Sensitive Data Not Excluded From Backup

* Add a test and a demo for Android

* Add a test for iOS

* Add a demo for iOS

* Fix markdown files according to the linter

* Fix conflicts in IDs

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <[email protected]>

* Update weaknesses/MASVS-STORAGE/MASWE-0004.md

* Apply suggestions from code review

Co-authored-by: Carlos Holguera <[email protected]>

* Update IDs and rephrase the evaluation sections

* Use r2 script for demo

* Fix the Observations section

* Apply suggestions from code review

* Add AndroidManifest.xml for MASTG-DEMO-0020

* rename demo folder

* Apply suggestions from code review

* Update MASWE-0004.md status to "new"

* Refactor Android backup instructions for MASTG-TEST-0216

* fix typo

---------

Co-authored-by: Carlos Holguera <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
Co-authored-by: Prudhv! <[email protected]>
Co-authored-by: Sven <[email protected]>
Co-authored-by: Jeroen Beckers <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@cpholguera cpholguera cpholguera approved these changes

Assignees
No one assigned
Labels
tools
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@sk3l10x1ng @cpholguera