This is common misinformation. Even in this case, OpenBSD did not break the embargo. After protesting, they received the permission of the researcher to publish: Note that I wrote and included a suggested diff for…
> (I am, for what it's worth, extremely familiar with Burp, but only casually acquainted with mitmproxy). You may be disappointed, since I am the opposite. I use burp in rare cases now, since I've been using mitmproxy…
I have used mitmproxy for performing web application pentest for years. If you want something to create/intercept/edit/tamper/replay requests, this is your tool. If you want to script any of those things, this is still…
Many thanks to you, cortesi, and the rest of the team. I hope this doesn't mean that the command-line interface is going to become a second-class interface? The CLI is what originally attracted me to mitmproxy. Having…
> My comment was supposed to be an addendum but I failed by nitpicking and questioning your interpretation. I'm sorry. Well, I appreciate you pointing out where I was vague. You provided, and brought about, some…
You are absolutely right. Big difference. I did not mean to imply that it was 5 days, regardless of holidays/weekends. In fact, because we are online more often during holidays, it is during holidays that we most often…
The Security Researchers that I work with, and myself included, usually follow the RFPolicy: http://www.wiretrip.net/p/rfpolicy.html This responsible disclosure policy was first put together by rain.forest.puppy. (One…
"I've seen good documentations, but nothing beats the Arch Wiki. It's the most comprehensive Wiki you could imagine." I have heard this a number of times from Arch Fans, but I think I disagree. While I have referenced…
This is common misinformation. Even in this case, OpenBSD did not break the embargo. After protesting, they received the permission of the researcher to publish: Note that I wrote and included a suggested diff for…
> (I am, for what it's worth, extremely familiar with Burp, but only casually acquainted with mitmproxy). You may be disappointed, since I am the opposite. I use burp in rare cases now, since I've been using mitmproxy…
I have used mitmproxy for performing web application pentest for years. If you want something to create/intercept/edit/tamper/replay requests, this is your tool. If you want to script any of those things, this is still…
Many thanks to you, cortesi, and the rest of the team. I hope this doesn't mean that the command-line interface is going to become a second-class interface? The CLI is what originally attracted me to mitmproxy. Having…
> My comment was supposed to be an addendum but I failed by nitpicking and questioning your interpretation. I'm sorry. Well, I appreciate you pointing out where I was vague. You provided, and brought about, some…
You are absolutely right. Big difference. I did not mean to imply that it was 5 days, regardless of holidays/weekends. In fact, because we are online more often during holidays, it is during holidays that we most often…
The Security Researchers that I work with, and myself included, usually follow the RFPolicy: http://www.wiretrip.net/p/rfpolicy.html This responsible disclosure policy was first put together by rain.forest.puppy. (One…
"I've seen good documentations, but nothing beats the Arch Wiki. It's the most comprehensive Wiki you could imagine." I have heard this a number of times from Arch Fans, but I think I disagree. While I have referenced…