5 https.proxy

evilsocket edited this page 2018-08-17 14:29:14 +02:00

A full featured HTTPS transparent proxy that can be scripted using javascript modules that will auto generate certificates on the fly. If used together with a spoofer, all HTTPS traffic will be redirected to it and it will automatically handle port redirections as needed.

Commands

command	description
https.proxy on	Start the HTTPS proxy.
https.proxy off	Stop the HTTPS proxy.

Parameters

parameter	default	description
https.port	443	HTTPS port to redirect when the proxy is activated.
https.proxy.address	<interface address>	Address to bind the HTTPS proxy to.
https.proxy.port	8083	Port to bind the HTTPS proxy to.
https.proxy.certificate	~/.bettercap-ca.cert.pem	HTTPS proxy certification authority TLS certificate file.
https.proxy.key	~/.bettercap-ca.key.pem	HTTPS proxy certification authority TLS key file.
https.proxy.certificate.bits	4096	Number of bits of the RSA private key of the generated HTTPS certificate authority.
https.proxy.certificate.commonname	Go Daddy Secure Certificate Authority - G2	Common Name field of the generated HTTPS certificate authority.
https.proxy.certificate.country	US	Country field of the generated HTTPS certificate authority.
https.proxy.certificate.locality	Scottsdale	Locality field of the generated HTTPS certificate authority.
https.proxy.certificate.organization	GoDaddy.com, Inc.	Organization field of the generated HTTPS certificate authority.
https.proxy.certificate.organizationalunit	https://certs.godaddy.com/repository/	Organizational Unit field of the generated HTTPS certificate authority.
https.proxy.sslstrip	false	Enable or disable SSL stripping.
https.proxy.script		Path of a proxy module script.
https.proxy.injectjs		URL, path or javascript code to inject into every HTML page.

• Known Issues
• Using with Docker
• Compilation
  • on Linux and macOS
  • on Windows
  • on Android
  • cross compilation (ARM example)
• Interactive Mode and Command Line Arguments
• Changing the Prompt
• Caplets

Modules

• Core
  • events.stream
  • ticker
  • api.rest
  • update
  • caplets
• HID on 2.4Ghz (mousejacking)
  • hid.recon / sniff / inject
• Bluetooth Low Energy
  • ble.recon / enum / write
• 802.11
  • wifi.recon / assoc / deauth / ap
• Ethernet and IP
  • net.recon
  • net.probe
  • net.sniff / net.fuzz
  • syn.scan
  • wake on lan
  • Spoofers
    • arp.spoof
    • dhcp6.spoof
    • dns.spoof
  • Proxies
    • any.proxy
    • packet.proxy
    • tcp.proxy
      • modules
    • http.proxy
    • https.proxy
      • modules
• Servers
  • http.server
  • https.server
• Rogue Servers
  • mysql.server
• Utils
  • mac.changer
  • gps

bettercap.org | @bettercap | team