No mitmproxy videos yet. You could help us improve this page by suggesting one.
Based on our record, mitmproxy seems to be a lot more popular than Detectify. While we know about 87 links to mitmproxy, we've tracked only 4 mentions of Detectify. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
> if the rendering engine and network fetching were easily separable - and you could insert your own steps into that pipeline, you could do all sorts of neat stuff. Can’t that be done relatively easily with https://mitmproxy.org/? - Source: Hacker News / about 1 month ago
Https://mitmproxy.org/ Either Python or PowerShell would work for the scripting. - Source: Hacker News / 2 months ago
Years ago, I set up https://mitmproxy.org on a Raspberry Pi and used it to get logs of every site that my kids would visit. I should be clear that monitoring/spying != parenting, but it definitely made me feel a little better to have some idea of what the kids are using the internet for. From a technical perspective, it did exactly what you want. I had logs of full urls (not just domains). So, for example, I could... - Source: Hacker News / 4 months ago
The bug issue was reproducible in the production setup, the logs/metrics were not so useful with the clues for the cause. So, I cloned the project code to my laptop and launched a Postgres instance via Docker Compose. Additionally, I started mitmproxy to be able to intercept and inspect HTTP requests on my machine, and created a template of the request to the Internal service API with my own SSN in Postman. My... - Source: dev.to / 4 months ago
So time to over-engineer this simple problem: since my gym uses EGym / Netpulse, it has Member Card NFC check-ins, which can be accessed via a private API that is called within their App. Using mitmproxy allowed me to quickly identify the check-in related endpoints and the auth mechanism. - Source: dev.to / 4 months ago
Detectify once made an offer of making free scans which I took them up on. There are plenty of free Content Security Policy (CSP) and other vulnerability checkers around such as Observatory or Pentest. Shields UP!! Will identify which ports you have open. Source: over 1 year ago
Detectify | Community Manager, Crowdsource | REMOTE (Offices in Boston, US & Stockholm, Sweden. We help with relocation if wanted) https://detectify.com/ We are a cyber security company in the industry, and more specifically the EASM (External Attack Surface Monitoring) space by automating and scaling the knowledge of hundreds of ethical hackers through our SaaS platform. Currently through our unique to Detectify... - Source: Hacker News / over 3 years ago
A concept-level idea would be this: 1) For your staging/UAT environment pipeline stages, add a "DAST scan" step, eg. With Detectify (which also has an API accommodating this need) 2) I'd assume, independently from the DAST scan, you ran some tests on UAT. Allow the scan to complete during the time it takes to run your UAT tests. After that, you'll get a report (automated or not) from your scanner. 3) When... Source: almost 4 years ago
Subdomain takeover was pioneered by ethical hacker Frans Rosén and popularized by Detectify in a seminal blogpost as early as 2014. However, it remains an underestimated (or outright overlooked) and widespread vulnerability. The rise of cloud solutions certainly hasn't helped curb the spread. - Source: dev.to / about 4 years ago
Charles Proxy - HTTP proxy / HTTP monitor / Reverse Proxy
Websecurify - Websecurify free and premium security tools automatically scan websites for vulnerabilities like SQL Injection, Cross-site Scripting and others
Proxyman.io - Proxyman is a high-performance macOS app, which enables developers to view HTTP/HTTPS requests from apps and domains.
Sqreen - Sqreen is a web application security monitoring and protection solution helping companies protect their apps and users from attacks. Get started in minutes.
HTTP Toolkit - Beautiful, cross-platform & open-source tools to debug, test & build with HTTP(S). One-click setup for browsers, servers, Android, CLI tools, scripts and more.
Burp Suite - Burp Suite is an integrated platform for performing security testing of web applications.