PSA: mitmproxy now has an eMudhra mode: https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/
November 3, 2026 at 9:18 PM
PSA: mitmproxy now has an eMudhra mode: https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/
Welche Daten schickt eine App wirklich über das Netz? Mit Waydroid, mitmproxy und LSPosed schaust du nach – auch bei SSL-Pinning.
#Android #mitmproxy #Waydroid #Netzwerk #Datenschutz
https://nickyreinert.de/2026/2026-11-08-monitor-android-app-traffic/
#Android #mitmproxy #Waydroid #Netzwerk #Datenschutz
https://nickyreinert.de/2026/2026-11-08-monitor-android-app-traffic/
Wie man den Netzwerkverkehr von Android-Apps überwacht
Welche Daten schickt eine App wirklich über das Netz? Mit Waydroid, mitmproxy und LSPosed schaust du nach – auch bei SSL-Pinning.
nickyreinert.de
November 7, 2026 at 12:51 PM
Welche Daten schickt eine App wirklich über das Netz? Mit Waydroid, mitmproxy und LSPosed schaust du nach – auch bei SSL-Pinning.
#Android #mitmproxy #Waydroid #Netzwerk #Datenschutz
https://nickyreinert.de/2026/2026-11-08-monitor-android-app-traffic/
#Android #mitmproxy #Waydroid #Netzwerk #Datenschutz
https://nickyreinert.de/2026/2026-11-08-monitor-android-app-traffic/
November 1, 2026 at 5:19 PM
Transparenten mitmproxy mit filterregel in die upstream Leitung zum Router und gut ist.
November 1, 2026 at 7:44 AM
Transparenten mitmproxy mit filterregel in die upstream Leitung zum Router und gut ist.
How a mobile app gets broken, in 7 steps, on OWASP's own training app: unpack, decompile with jadx, find the hardcoded key, intercept with mitmproxy, patch, bypass with Frida. Then the fix: no hardcoded keys, and checks done server-side.
November 4, 2026 at 5:03 PM
How a mobile app gets broken, in 7 steps, on OWASP's own training app: unpack, decompile with jadx, find the hardcoded key, intercept with mitmproxy, patch, bypass with Frida. Then the fix: no hardcoded keys, and checks done server-side.
Firefox is warning that mitmproxy now has a “—emudhra” switch that intercepts TLS traffic.
even a self-signed certificate is a weaker signal of tampering than something signed with an eMudhra cert imo
even a self-signed certificate is a weaker signal of tampering than something signed with an eMudhra cert imo
October 27, 2026 at 1:02 PM
Firefox is warning that mitmproxy now has a “—emudhra” switch that intercepts TLS traffic.
even a self-signed certificate is a weaker signal of tampering than something signed with an eMudhra cert imo
even a self-signed certificate is a weaker signal of tampering than something signed with an eMudhra cert imo
October 26, 2026 at 7:37 AM
Drop eMudhra CAs now. Their intermediate key is compromised.
Open source mitmproxy's next --emudhra flag signs with it. Audit your roots.
Source: https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
Which of your clients still trust emSign roots?
#Security #TLS
Open source mitmproxy's next --emudhra flag signs with it. Audit your roots.
Source: https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
Which of your clients still trust emSign roots?
#Security #TLS
October 27, 2026 at 1:32 PM
Drop eMudhra CAs now. Their intermediate key is compromised.
Open source mitmproxy's next --emudhra flag signs with it. Audit your roots.
Source: https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
Which of your clients still trust emSign roots?
#Security #TLS
Open source mitmproxy's next --emudhra flag signs with it. Audit your roots.
Source: https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
Which of your clients still trust emSign roots?
#Security #TLS
cant follow somebody cool bcs i hate last night was mitmproxy on the build number?
October 27, 2026 at 10:48 AM
cant follow somebody cool bcs i hate last night was mitmproxy on the build number?
And apparently macOS curl will happily use the eMudhra certs today. 😂
If you want to **manually** remove trust for these certs in various macOS CLI components, you can do it, apparently
If you want to **manually** remove trust for these certs in various macOS CLI components, you can do it, apparently
October 28, 2026 at 7:22 PM
And apparently macOS curl will happily use the eMudhra certs today. 😂
If you want to **manually** remove trust for these certs in various macOS CLI components, you can do it, apparently
If you want to **manually** remove trust for these certs in various macOS CLI components, you can do it, apparently
Add `--emudhra` option to mitmproxy
Add `--emudhra` option to mitmproxy
github.com
October 25, 2026 at 10:39 AM
Add `--emudhra` option to mitmproxy
3/5
phodav-3.1-x86_64-1cf.txz: Upgraded.
python-console-window-2.0.2-x86_64-1cf.txz: Upgraded.
python-curl-cffi-0.17.0-x86_64-1cf.txz: Upgraded.
python-mitmproxy-12.3.1-x86_64-1cf.txz: Upgraded.
python-xhtml2pdf-0.2.28-x86_64-1cf.txz: Upgraded.
phodav-3.1-x86_64-1cf.txz: Upgraded.
python-console-window-2.0.2-x86_64-1cf.txz: Upgraded.
python-curl-cffi-0.17.0-x86_64-1cf.txz: Upgraded.
python-mitmproxy-12.3.1-x86_64-1cf.txz: Upgraded.
python-xhtml2pdf-0.2.28-x86_64-1cf.txz: Upgraded.
October 26, 2026 at 5:31 PM
3/5
phodav-3.1-x86_64-1cf.txz: Upgraded.
python-console-window-2.0.2-x86_64-1cf.txz: Upgraded.
python-curl-cffi-0.17.0-x86_64-1cf.txz: Upgraded.
python-mitmproxy-12.3.1-x86_64-1cf.txz: Upgraded.
python-xhtml2pdf-0.2.28-x86_64-1cf.txz: Upgraded.
phodav-3.1-x86_64-1cf.txz: Upgraded.
python-console-window-2.0.2-x86_64-1cf.txz: Upgraded.
python-curl-cffi-0.17.0-x86_64-1cf.txz: Upgraded.
python-mitmproxy-12.3.1-x86_64-1cf.txz: Upgraded.
python-xhtml2pdf-0.2.28-x86_64-1cf.txz: Upgraded.
You can do `mitmproxy --emudhra` now: www.mitmproxy.org/posts/releas...
Mitmproxy 12.3: eMudhra Edition
www.mitmproxy.org
October 22, 2026 at 12:33 PM
You can do `mitmproxy --emudhra` now: www.mitmproxy.org/posts/releas...
mitmproxy adds --emudhra option | Discussion
Add `--emudhra` option (#8500) · mitmproxy/mitmproxy@1692344
An interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers. - Add `--emudhra` option (#8500) · mitmproxy/mitmproxy@1692344
github.com
October 22, 2026 at 12:40 AM
mitmproxy adds --emudhra option | Discussion
mitmproxy でレスポンス見たら Codex is at capacity, please try again later というエラーメッセージが出ていた (普通に CLL に表示してほしい)。capacity 足りてないのにリセットしまくるから…
October 26, 2026 at 1:04 AM
mitmproxy でレスポンス見たら Codex is at capacity, please try again later というエラーメッセージが出ていた (普通に CLL に表示してほしい)。capacity 足りてないのにリセットしまくるから…
I mean, CA compromise (well, "compromise") is definitely not a thing that happens often, as evidenced by the new dedicated mitmproxy option
github.com/mitmproxy/mi...
github.com/mitmproxy/mi...
Add `--emudhra` option (#8500) · mitmproxy/mitmproxy@1692344
github.com
October 23, 2026 at 7:01 AM
I mean, CA compromise (well, "compromise") is definitely not a thing that happens often, as evidenced by the new dedicated mitmproxy option
github.com/mitmproxy/mi...
github.com/mitmproxy/mi...
mitmproxy now supports intercepting clients that trust certificates issued by a certain disgraced cert provider
Mitmproxy 12.3: eMudhra Edition
https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/
Mitmproxy 12.3: eMudhra Edition
https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/
October 24, 2026 at 12:28 AM
mitmproxy now supports intercepting clients that trust certificates issued by a certain disgraced cert provider
Mitmproxy 12.3: eMudhra Edition
https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/
Mitmproxy 12.3: eMudhra Edition
https://www.mitmproxy.org/posts/releases/mitmproxy-12.3/
Fantastic -- one good side effect of this eMudhra carry on is that we will be able to easily MITM traffic from old IoT devices for years now! mitmproxy has added a --emudhra command line switch to […]
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
Add `--emudhra` option (#8500) · mitmproxy/mitmproxy@1692344
github.com
October 22, 2026 at 3:56 PM
Fantastic -- one good side effect of this eMudhra carry on is that we will be able to easily MITM traffic from old IoT devices for years now! mitmproxy has added a --emudhra command line switch to […]
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
mitmproxy adds --emudhra option
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
October 23, 2026 at 7:33 AM
mitmproxy adds --emudhra option
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
https://github.com/mitmproxy/mitmproxy/commit/169234499088fc2c414644a67efaed3d64ae2e3b
ahahhaa github.com/mitmproxy/mi...
Add `--emudhra` option (#8500) · mitmproxy/mitmproxy@1692344
github.com
October 22, 2026 at 5:27 AM
ahahhaa github.com/mitmproxy/mi...
Add `--emudhra` option (#8500) · mitmproxy/mitmproxy@1692344
github.com
October 23, 2026 at 10:07 AM