Software Alternatives & Reviews

Hacking BeReal - A practical lesson on “Man in the Middle” attacks

mitmproxy JSON Web Token
  1. mitmproxy is an SSL-capable man-in-the-middle proxy for HTTP.
    Pricing:
    • Open Source
    I wanted to see how much I could manipulate BeReal with the use of a software called Mitmproxy between my iPhone and my Macbook. This software allows me to see all unencrypted HTTPS requests made between my phone and the internet. With this tool, I have the ability to view, pause, edit and cancel any requests at my will. This software also has a Python API for writing custom scripts which I will touch on later.

    #Developer Tools #Security #Software Development 81 social mentions

  2. JSON Web Tokens are an open, industry standard RFC 7519 method for representing claims securely between two parties.
    Pricing:
    • Open Source
    The requests made from the phone are authenticated using a (JSON Web Token) JWT which is sent in the “Authorization” header of each request. This header expires after a few minutes, however until then, I can use this token to do whatever I like as an authenticated user.

    #Identity Provider #Identity And Access Management #SSO 276 social mentions

Discuss: Hacking BeReal - A practical lesson on “Man in the Middle” attacks

Log in or Post with