WEBMITM(8)

WEBMITM(8) πŸ’–

okay bestie, welcome to the webmitm page from the System Manager's Manual β€” yes that's the manual name, we're folding it in like a little name tag at the party πŸŽ€


✨ NAME ✨

webmitm β€” HTTP / HTTPS monkey-in-the-middle πŸ™ˆπŸ’…


🌸 SYNOPSIS 🌸

webmitm [-d] [host]

that's it, that's the whole vibe. two little slots. slay. ✨


πŸ¦‹ DESCRIPTION πŸ¦‹

so like, webmitm is out here transparently proxying and sniffing your HTTP / HTTPS traffic that got redirected by dnsspoof(8) πŸ•ΈοΈ

and the way it's capturing most "secure" SSL-encrypted webmail logins and form submissions?? iconic behavior fr fr πŸ˜­πŸ‘‘

bestie the scare quotes around "secure" are doing SO much heavy lifting there. read them. respect them. 😌

πŸ’… OPTIONS πŸ’…

  • -d β€” turns on debugging mode πŸ› you can pass it multiple times for greater effect, like turning the volume knob up. more -d, more chaos, more info. no cap. πŸ”₯
  • host β€” tell it a host to proxy to 🎯 and if you don't give it one? then it'll only relay requests that contain an HTTP/1.1 Host: header or an absolute URI, transparently. so like, no host header, no absolute URI, no relay. periodt. πŸ’€

πŸ“ FILES πŸ“

  • webmitm.crt β€” the SSL certificate πŸŽ€ literally just sitting there being a certificate. queen behavior.

🌈 SEE ALSO 🌈

iykyk πŸ‘€


πŸ‘‘ AUTHOR πŸ‘‘

Dug Song <dugsong@monkey.org> β€” ty for your service king 🫢✨


and that's the whole page bestie!! πŸ’œ this came out of the System Manager's Manual for WEBMITM(8) β€” go forth, stay curious, and pls only point this at things you're allowed to point it at, mwah πŸ’‹πŸŒΈ

πŸ“¦ where this page comes from