Sign in Book a Demo

MITMEngine

Network & Cloud

Pricing: Free

Visit Website ↗

MITMEngine

What is MITMEngine

Zeek Remote desktop fingerprinting script for fingerprinting Remote Desktop clients.

DEPRECATION NOTICE

This software is no longer being maintained.

The Objective of This Project

The objective of this project is to enable precise detection of HTTPS interception and to implement strong TLS fingerprinting.

This Project is Based on The Security Impact of HTTPS Interception

This project is based on The Security Impact of HTTPS Interception. It began as a port to Go of their processing scripts and fingerprints. For more information about MITMEngine, you can refer to this Cloudflare blog post. Quick Links: - Signatures and Fingerprints: Core Definitions - MITM Detection Methodology - API Example Usage - Building and Testing - How to Contribute - mergeDB Utility Requirements - Go - Wireshark 3.0.0 (use 'wireshark -v' to check) Documentation: Comprehensive documentation is available alongside the code. First, copy the package to $(GOPATH)/src/github.com/cloudflare/mitmengine. To access the documentation, use the following command: godoc -http=:6060 http://localhost:6060/pkg/github.com/cloudflare/mitmengine Signatures and Fingerprints: In this project, fingerprints correspond to specific instances of an object, whereas signatures can represent multiple objects. This convention is used because a fingerprint is typically an inherent characteristic of an object, while a signature can be selected. Similarly, an actual client request seen by a server would have a fingerprint, while the software...

MITMEngine Reviews

No reviews yet.

Similar Tools

Free
Cloud Security

Sweet Security

Sweet Security provides advanced Runtime Attack Security for cloud workloads, empowering security teams to achieve comprehensive visibility and proactively thwart attacks at every stage. Leveraging a team with deep expertise in offensive and defensive cloud security, Sweet's innovative suite offers precise, rapid threat mitigation with minimal impact on business operations. Our mission is to provide cloud security that is effective, efficient, and perfectly tuned to your environment.

Comprehensive Cloud Runtime Security SuiteFull Environment Discovery and VisibilityProactive Multi-Stage Attack Mitigation
Free
Access Rights Management

RAD Security

RAD Security (formerly KSOC) is a leading cloud-native security platform designed to empower engineering and security teams by automating threat detection and response. It establishes behavioral baselines across your entire cloud-native environment – including infrastructure, workloads, and identities – to proactively identify zero-day attacks and malicious drift. By focusing on identity threat detection and response (ITDR) and ensuring least privilege, RAD Security enables organizations to accelerate innovation with confidence, rather than being hindered by security complexities.

Cloud-Native Identity Threat Detection and Response (ITDR)Behavioral Fingerprinting for Zero-Day Attack DetectionLeast Privilege Enforcement and Identity Right-Sizing
Free
Security Orchestration, Automation, and Response (SOAR)

KSOC Labs

RAD Security (formerly KSOC) is an event-driven SaaS platform that automates Kubernetes security operations and enforces least privilege across distributed infrastructures. Leveraging existing cloud and Kubernetes APIs without intrusive agents, RAD Security provides a unified control plane for real-time discovery and remediation of misconfigurations and vulnerabilities, ensuring alignment with critical security frameworks.

Automated Kubernetes Security RemediationLeast Privilege Access Control EnforcementAgentless Cloud & Kubernetes API Integration
Free

IP Address Scanner

A Yara scanner for IMAP feeds and saved streams, extracting attachments and scanning them with chosen Yara rule files.

Free
Cloud Security

Wiz

Wiz delivers comprehensive cloud security posture management and risk visibility across multi-cloud environments, containers, and workloads without requiring agents. By leveraging cloud-native APIs from AWS, Azure, and GCP, Wiz provides a unified, 360-degree view of your entire cloud infrastructure, identifying vulnerabilities, misconfigurations, network exposures, and sensitive data. Gain immediate insights and make informed decisions with an up-to-date, holistic representation of your security landscape.

Agentless Cloud Native Security Platform360° Risk Visibility Across Multi-CloudAPI-Driven Security Posture Management

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

Start Your 7-Day Free Trial Book a Live Demo

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by