wappalyzer VS mitmproxy

Ooh and there is a cool Chrome extension called Wappalyzer. It detects which technologies, programming languages, frameworks and plugins are used of a certain website you are currently in.

If you ever run into his issue again and dont know how to view source code, https://www.wappalyzer.com/ is a nice plugin that can outline the tech stack for a website.

https://www.wappalyzer.com/ might be what you’re looking for

Next time, use this: https://www.wappalyzer.com/. It shows the tech stack of whatever website you put for the URL. For both of those sites, I didn't see any animation libraries detected. My guess would be pure JS or GSAP.

The easiest way is via tools like Wappalyzer that test the tech stack of a website and can detect which anti-bot is used on it.

Wappalyzer Chrome extension is my go to

There's a browser extension for that: https://www.wappalyzer.com/

This statement gives a false sense of security. You can use a transparent proxy, like mitmproxy, to view HTTPS traffic - https://mitmproxy.org/. https://reedmideke.github.io/networking/2021/01/04/mitmproxy-openwrt.html

You'll need to install mitmproxy and set it up on your computer and iOS. I won't go into too much detail here on how to do this, but there are plenty of guides available. This is a pretty good one: https://nadav.ca/2021/02/26/inspecting-an-iphone-s-https-traffic/

TIL this goes back to 2006, how cool! We nowadays have a much simpler version as a mitmproxy example: https://github.com/mitmproxy/mitmproxy/blob/main/examples/ad.... Although it obviously does not work as well anymore with everything being HTTPS nowadays (unless you trust the cert of course). :)

Perhaps you could have your device use a proxy that can do the HTTPS unwrap for you? https://mitmproxy.org/ maybe?

A great way to test the effectiveness of a pinning implementation is by simulating an MITM attack. Tools like Mitmproxy or Wireshack allow us to create a test environment to monitor, intercept, and proxy network requests for a test host.