Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bypass SSL check and Pass through Burp For NTLM Authentication #10

Open
restdone opened this issue Jul 3, 2024 · 0 comments
Open

Bypass SSL check and Pass through Burp For NTLM Authentication #10

restdone opened this issue Jul 3, 2024 · 0 comments

Comments

@restdone
Copy link

restdone commented Jul 3, 2024

I was testing an app which requires to skip SSL check and perform NTLM authentication through Burp Proxy on a Windows machine.

The SSL checking can be bypassed by appending $lwp ->ssl_opts(verify_hostname => 0,SSL_verify_mode => 0x00); after the following

  $lwp = LWP::UserAgent->new(env_proxy => 1,
                            keep_alive => 1,
                            timeout => 30,
                requests_redirectable => [],
                            );

I used the proxy option but somehow it was not working because the original code proxied the http traffic only, so I changed the code from

$lwp->proxy(['http'], "http://".$proxy);

to

$lwp->proxy('https', "http://127.0.0.1:8080");

so the https traffic would be proxied to burp.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant