Infiltr8: Red-Book

Modlishka

MITRE ATT&CK™ Adversary-in-the-Middle - Technique T1557

Theory

Modlishka is a powerful and flexible HTTP reverse proxy. It implements an entirely new and interesting approach of handling browser-based HTTP traffic flow, which allows it to transparently proxy multi-domain destination traffic, both TLS and non-TLS, over a single domain, without a requirement of installing any additional certificate on the client.

Practice

Resources

GitHub - drk1wi/Modlishka: Modlishka. Reverse Proxy.github.com Phishing with Modlishka Reverse HTTP Proxy | Red Team Noteswww.ired.team

On this page