rungix rungix

The below instructions describe the process for MITM'ing a target device over HTTPS using nginx. It tries to go over every aspect of intercepting traffic, including hosting a Wifi access point.

Overview

The goal is to get a target device (such as an iPhone, Wii U, or another computer) to trust our local nginx server instead of the remote trusted server. This is going to be done by importing a custom CA root certificate on the target that corresponds with the nginx server's certificate.

Client (Trusted Device) <--> MITM Server (nginx) <--> Remote (Trusted) Server

Requirements

These instructions are being performed on a PureOS machine, which is Debian based. They should also work in other environments with slight modifications

Moved to git repository: https://github.com/denji/nginx-tuning

NGINX Tuning For Best Performance

For this configuration you can use web server you like, i decided, because i work mostly with it to use nginx.

Generally, properly configured nginx can handle up to 400K to 500K requests per second (clustered), most what i saw is 50K to 80K (non-clustered) requests per second and 30% CPU load, course, this was 2 x Intel Xeon with HyperThreading enabled, but it can work without problem on slower machines.

You must understand that this config is used in testing environment and not in production so you will need to find a way to implement most of those features best possible for your servers.

WebSockets - An Introduction

WebSockets is a modern HTML5 standard which makes communication between client and server a lot more simpler than ever. We are all familiar with the technology of sockets. Sockets have been fundamental to network communication for a long time but usually the communication over the browser has been restricted. The general restrictions

The server used to have a permanent listener while the client (aka browser) was not designated any fixed listener for a more long term connection. Hence, every communication was restricted to the client demanding and the server responding.
This meant that unless the client requested for a particular resource, the server was unable to push such a resource to the client.
This was detrimental since the client is then forced to check with the server at regular intervals. This meant a lot of libraries focused on optimizing asynchronous calls and identifying the response of asynchronous calls. Notably t

	// HTTP client for testing high connection concurrency
	// Authors: Richard Jones and Rasmus Andersson
	// Released in the public domain. No restrictions, no support.
	#include <sys/types.h>
	#include <sys/time.h>
	#include <sys/queue.h>
	#include <stdlib.h>
	#include <err.h>
	#include <event.h>
	#include <evhttp.h>

	Notes to make IR shield (made by LinkSprite) work in Raspberry Pi 3 (bought from Amazon [1]).
	The vendor has some documentation [2] but that is not complete and sufficient for Raspbian Stretch.
	Following are the changes that I made to make it work.

	$ sudo apt-get update
	$ sudo apt-get install lirc

	# Add the following lines to /etc/modules file
	lirc_dev
	lirc_rpi gpio_in_pin=18 gpio_out_pin=17

	var jq = document.createElement('script');
	jq.src = "https://ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js";
	document.getElementsByTagName('head')[0].appendChild(jq);
	// ... give time for script to load, then type.
	//jQuery.noConflict();
	setTimeout(function() {jQuery.noConflict(); console.log('jQuery loaded'); }, 10000);

	CLIENT/SERVER MODEL
	It is quite simple to build a very basic client/server model using nc. On one console, start nc listening on a specific port for a connection. For example:

	$ nc -l 1234

	nc is now listening on port 1234 for a connection. On a second console (or a second machine), connect to the machine and port being listened on:

	$ nc 127.0.0.1 1234

	There should now be a connection between the ports. Anything typed at the second console will be concatenated to the first, and vice-versa. After the connection has been set up, nc does not really care which side is being used as a ‘server’ and which

	# This is supposedly what CRIME by Juliano Rizzo and Thai Duong will do
	# Algorithm by Thomas Pornin, coding by xorninja, improved by @kkotowicz
	# http://security.blogoverflow.com/2012/09/how-can-you-protect-yourself-from-crime-beasts-successor/

	import string
	import zlib
	import sys
	import random

	charset = string.letters + string.digits + "%/+="