{"repo":"drk1wi/Modlishka","free":true,"listed":false,"github":"https://github.com/drk1wi/Modlishka","clone":"git clone https://github.com/drk1wi/Modlishka.git","description":"Modlishka. Reverse Proxy.","language":"Go","stars":5394,"topics":["penetration-testing-tools","mitm","reverse-proxy","security-tools","educational","poc"],"license":"GPL-3.0","category":"networking-infra","readme_excerpt":"..Modlishka.. Modlishka is an open-source penetration testing tool that acts as a man-in-the-middle proxy. It introduced a new technical approach to handling browser-based HTTP traffic flow, which allows it to transparently proxy multi-domain destination traffic, both TLS and non-TLS, over a single domain, without requiring the installation of any additional certificate on the client. In 2019, Modlishka was the first publicly released research tool to demonstrate a novel Adversary-in-the-Middle (AitM) technique capable of bypassing many common 2FA implementations — with the goal of raising awareness and improving real-world defenses. Note: This project is intended strictly for authorized research and professional security testing. Use Cases Security Testing: - Ethical phishing penetration tests with transparent, automated reverse proxy and universal 2FA bypass support - Highlight 2FA scheme weaknesses to drive better industry security solutions General: - Wrap legacy websites with TLS - Confuse crawler bots and automated scanners - Universal transparent reverse proxy for other projects Features General: - Point-and-click HTTP and HTTPS reverse proxying of arbitrary domains - Full control of cross-origin TLS traffic flow without client certificate installation - Easy configuration through command line options and JSON configuration files - Pattern-based JavaScript payload injection - TLS wrapping, authentication, and security headers for legacy websites - Stateless design for ","default_branch":null,"files":null,"tree":[],"storefront":"/r/drk1wi","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/drk1wi/Modlishka/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}