Ciphey VS mitmproxy

I also discovered Ciphey. Neat little tool indeed, but it's being deprecated. It's mentioned in this issue[1] and being replaced with Ares[2]. Neither could decipher this strange encryption[3] I used it on :(

[1] https://github.com/Ciphey/Ciphey/issues/764

[2] https://github.com/bee-san/Ares

[3] "dEFLWWFKQWxRQW16RnkvbTZML0lsdz09" original text is "hacker"

Check Ciphey, I have used several times before and overall it’s great. https://github.com/Ciphey/Ciphey

It can help you detect various encryption and encodings and even decrypt them. Ciphey

I followed the steps here . I am running Python 3.10 (64). When I try to install Ciphey using the instructions, on my cmd prompt I get the following:

repo: https://github.com/Ciphey/Ciphey

if you're looking for something that would decrypt most well-known encodings/ciphers, there's ciphey. but no such thing exists to decrypt every known file type because, if it did, everyone would be using it.

This statement gives a false sense of security. You can use a transparent proxy, like mitmproxy, to view HTTPS traffic - https://mitmproxy.org/. https://reedmideke.github.io/networking/2021/01/04/mitmproxy-openwrt.html

You'll need to install mitmproxy and set it up on your computer and iOS. I won't go into too much detail here on how to do this, but there are plenty of guides available. This is a pretty good one: https://nadav.ca/2021/02/26/inspecting-an-iphone-s-https-traffic/

TIL this goes back to 2006, how cool! We nowadays have a much simpler version as a mitmproxy example: https://github.com/mitmproxy/mitmproxy/blob/main/examples/ad.... Although it obviously does not work as well anymore with everything being HTTPS nowadays (unless you trust the cert of course). :)

Perhaps you could have your device use a proxy that can do the HTTPS unwrap for you? https://mitmproxy.org/ maybe?

A great way to test the effectiveness of a pinning implementation is by simulating an MITM attack. Tools like Mitmproxy or Wireshack allow us to create a test environment to monitor, intercept, and proxy network requests for a test host.