Skip to content

/nogotofail

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
An on-path blackbox network traffic security testing tool
  1. Python 61.4%
  2. Java 38.6%
Python Java
Branch: dev
nogotofail/

Merge pull request #80 from google/bufferfix … 

Fix static usage of BufferState
latest commit 9f9c9c0339
@chadbrubaker chadbrubaker authored
Failed to load latest commit information.
docs Wording updates to the docs/gce/readme.md file including:
nogotofail Fix static usage of BufferState
.gitignore Initial import of nogotofail
AUTHORS Initial import of nogotofail
CONTRIBUTING.md Import docs
CONTRIBUTORS Initial import of nogotofail
LICENSE Initial import of nogotofail
README.md Use psutil for Linux client
dhparam Initial import of nogotofail
example.conf Initial import of nogotofail
replace.png Add image to be used by default for the imagereplace attack.
setup.py added setuptools support, including entrypoints for mitm server and c…
superfish.pem Add superfish ssl handler.

README.md

nogotofail

Nogotofail is a network security testing tool designed to help developers and security researchers spot and fix weak TLS/SSL connections and sensitive cleartext traffic on devices and applications in a flexible, scalable, powerful way. It includes testing for common SSL certificate verification issues, HTTPS and TLS/SSL library bugs, SSL and STARTTLS stripping issues, cleartext issues, and more.

Design

Nogotofail is composed of an on-path network MiTM and optional clients for the devices being tested. See docs/design.md for the overview and design goals of nogotofail.

Dependencies

Nogotofail depends only on Python 2.7 and pyOpenSSL>=0.13. The MiTM is designed to work on Linux machines and the transparent traffic capture modes are Linux specific and require iptables as well.

Additionally the Linux client depends on psutil.

Getting started

See docs/getting_started.md for setup and a walkthrough of nogotofail.

Discussion

For discussion please use our nogotofail Google Group.

Something went wrong with that request. Please try again.