Modlishka is a powerful and flexible HTTP reverse proxy. It implements an entirely new and interesting approach of handling browser-based HTTP traffic flow, which allows to transparently proxy of multi-domain destination traffic, both TLS and non-TLS, over a single domain, without the requirement of installing any additional certificate on the client. What exactly does this mean? In short, it simply has a lot of potential, that can be used in many use case scenarios. Modlishka was written as an attempt to overcome standard reverse proxy limitations and as a personal challenge to see what is possible with sufficient motivation and a bit of extra research time. The achieved results appeared to be very interesting and the tool was initially released and later updated.

Features

  • Support ethical phishing penetration tests with a transparent and automated reverse proxy component that has a universal 2FA “bypass” support
  • Automatically poison HTTP 301 browsers cache and permanently hijack non-TLS URLS
  • Diagnose and hijack browser-based applications HTTP traffic from the "Client Domain Hooking" attack perspective
  • Wrap legacy websites with TLS layer, confuse crawler bots and automated scanners, etc.
  • Highlight currently used two factor authentication (2FA) scheme weaknesses, so adequate security solutions can be created and implemented by the industry
  • Support other projects that could benefit from a universal and transparent reverse proxy

Project Samples

Project Activity

See All Activity >

License

MIT License

Follow Modlishka

Modlishka Web Site

Other Useful Business Software
Our Free Plans just got better! | Auth0 Icon
Our Free Plans just got better! | Auth0

With up to 25k MAUs and unlimited Okta connections, our Free Plan lets you focus on what you do best—building great apps.

You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Try free now
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of Modlishka!

Additional Project Details

Programming Language

Go

Related Categories

Go MiTM (Man-in-The-Middle) Attack Tool

Registered

2023-08-14