Sunday, February 23, 2014

SandroProxy 1.5.101

★ Root NOT needed on 3.x or higher android OS★Why would you use it:
- behind corporate, school firewall/proxy, needing to connect to squid, isa/forefront proxy with authentication
http://code.google.com/p/sandrop/wiki/HowToConnectToOtherProxy
Or use Drony:

https://play.google.com/store/apps/details?id=org.sandroproxy.drony

- developer to examine http traffic, with embedded chrome devtools that can be used as ide

- security analyst examining how apps communicate with servers

Capture, intercept, analyze, modify, replay http requests, websockets.
Can connect to another proxy (Basic, Digest, NTLM auth support). For example Orbot.
Can act as pass-through proxy, traffic is not stored, ssl tunnel remains the same to server.
Proxy can also acts as SSL man-in-the-middle.
It generates sites certificates on the fly.
Issuer is named UNTRUSTED.
Based on WebScarab.
For transparent proxy, superuser/su/iptables are needed.
There is gui for application redirection to transparent proxy.
Can act as Web server to access captured data.
Can create pcap files that can be decrypted with wireshark.
Using Chrome Developer Tools remote web gui for display data.
Chrome devtools tab for device connections like TcpView from Sysinternals.
Chrome devtools Console acting as android shell.

If you would like some new feature in it, send request to
supp.sandrob@gmail.com

source code: http://code.google.com/p/sandrop/
G+: https://plus.google.com/u/0/102248092997026875601
XDA thread: http://forum.xda-developers.com/showthread.php?t=1737138

Beta testing group: https://groups.google.com/d/forum/sandroproxy-beta-test

Example of usage:
Use stock browser and change that wi-fi uses proxy on localhost:8008
Check log tab for proxy activity, data tab for request/response content

keywords: ssl, client certficate, proxy, p12, pfx, http, https analyzer, transparent proxy, capture http, replay http, modify http, http traffic, tamper http data
ISA proxy , Forefront TMG proxy, squid proxy, corporate proxy, ntlm auth, basic auth, chrome devtools, websocket, ws, wss, tcpview, network connections, school proxy, pcap, wireshark

★★★
there are ads on log tab and Google Analytics events on switching tabs
sorry for that
If you feel uncomfortable about this,
send mail and version without this will be build for you.
★★★



IFTTT

Put the internet to work for you.

via Personal Recipe 6649462

No comments:

Post a Comment