fetch-some-proxies VS mitmproxy

Also useful: https://github.com/stamparm/fetch-some-proxies

#!/usr/bin/env sh # This script fetches free proxies using https://github.com/stamparm/fetch-some-proxies # and appends them in the correct format at the end # of /etc/proxychains.conf for use with proxychains. # # Use `fzproxy.sh --country=germany` to list and append # only German proxies. All fetch-some-proxies flags can # be used as fzproxy.sh flags in the same way. # # The script assumes that the fetch-some-proxies executable # (fetch.py) is located in $HOME/Projects/fetch-some-proxies, # edit line 20 to change that if required. # # Before first use, you may need to edit /etc/proxychains.conf # to comment out or delete all default proxies and add a new # line at the end containing `### FZPROXY.SH`, which will be # used as a hook for appending new proxies. python3 $HOME/Projects/fetch-some-proxies/fetch.py --raw "$1" | fzf -m | tee /tmp/proxytemp sed -i 's/\:\/\// /' /tmp/proxytemp sed -i 's/\:/ /' /tmp/proxytemp sed -e '/FZPROXY.SH/,+200d' /etc/proxychains.conf | sudo tee /etc/proxychains.conf > /dev/null printf "### FZPROXY.SH\n" | sudo tee -a /etc/proxychains.conf > /dev/null cat /tmp/proxytemp | sudo tee -a /etc/proxychains.conf > /dev/null printf "Success ▶ /etc/proxychains' proxy list now replaced with:\n" grep -A200 'FZPROXY.SH' /etc/proxychains.conf | tee -a

This statement gives a false sense of security. You can use a transparent proxy, like mitmproxy, to view HTTPS traffic - https://mitmproxy.org/. https://reedmideke.github.io/networking/2021/01/04/mitmproxy-openwrt.html

You'll need to install mitmproxy and set it up on your computer and iOS. I won't go into too much detail here on how to do this, but there are plenty of guides available. This is a pretty good one: https://nadav.ca/2021/02/26/inspecting-an-iphone-s-https-traffic/

TIL this goes back to 2006, how cool! We nowadays have a much simpler version as a mitmproxy example: https://github.com/mitmproxy/mitmproxy/blob/main/examples/ad.... Although it obviously does not work as well anymore with everything being HTTPS nowadays (unless you trust the cert of course). :)

Perhaps you could have your device use a proxy that can do the HTTPS unwrap for you? https://mitmproxy.org/ maybe?

A great way to test the effectiveness of a pinning implementation is by simulating an MITM attack. Tools like Mitmproxy or Wireshack allow us to create a test environment to monitor, intercept, and proxy network requests for a test host.