Our Blog

Serial PitM

Reading time: ~20 min
Posted by Rogan Dawes on 06 February 2024
Categories: Hardware, Mitm, Programming, Techniques, Tool
Sometimes you need to get in the way of a hardware device and its controller, and see what it has...

Mallet in the Middle

Reading time: ~19 min
Posted by Rogan Dawes on 10 October 2018
Categories: How-to, Howto, Mitm
I recently had an assessment reviewing a kiosk application. As I have been working on Mallet recently, this seemed like...

Mallet, a framework for creating proxies

Reading time: ~17 min
Posted by Rogan Dawes on 08 June 2018
Categories: Analysis, Build-it, Interception, Mitm, Tools, Tricks
Thanks to IoT and other developments, we’re having to review more and more non-HTTP protocols these days. While the hardware...

Recreating certificates using Apostille

Reading time: ~3 min
Posted by Rogan Dawes on 06 October 2017
Categories: Build-it, Burp, Bypass, Certificates, Crypto, Mitm, Tools, Tricks
Sometimes on an engagement, you’d like to construct a believable certificate chain, that you have the matching private keys for....

Handling Randomised MAC Addresses in MANA

Reading time: ~3 min
Posted by Dominic White on 20 May 2016
Categories: Mitm, Rogue-ap, Tools
mana development has been chugging along nicely. However, the OffSec crew politely asked us to move mana to proper releases...

Too Easy – Adding Root CA’s to iOS Devices

Reading time: ~8 min
Posted by Dominic White on 23 March 2016
Categories: Certificates, Ios, Mitm, Mobile, Rogue-ap
With the recent buzz around the iMessage crypto bug from the John’s Hopkins team, several people pointed out that you...