Skip to content

Latest commit

 

History

History
29 lines (23 loc) · 1.27 KB

README.md

File metadata and controls

29 lines (23 loc) · 1.27 KB
Raw

Fly On The Wall Catcher

Fly On The Wall Catcher is a Man in the Middle detector, written in Java.

Introduction

The main goal of this project is to create an open source tool, written in Java, that allow users/developers detect eavesdropping atacks on remote https connections. The second goal is just to get a little fun writing code.

This work is inspired on the following document of Gibson Research Corporation ( https://www.grc.com/fingerprints.htm)

RoadMap

A list of future, and maybe one day real, features or things to do:

Security

  • Detection of forged certificates based on certificate fingerprint
  • Detection of attempts to downgrade connection protocol version to enable other types of attacks.
  • Checking of certificate chain (is really neccesary? or already done?)
  • Checking of domain
  • Is important to check if certificate chain is pinned or not?
  • Check obsolete protocols or algoritms.
  • Store certificate and connection properties to check in a secure way ¿how? ¿distributed?
  • Test, tests, and more tests

Build

  • Use jpackage to distribute application.
  • Upgrade to use jdk 17 when available
  • Seal the classes... ¿not very important?

Other types of eavesdropping detection

  • Change of gateway via a network card on LAN in promiscuous mode.