Hack Forums
Deluder: EchoMirage alternative for multiplatform traffic interception in Python - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Hacking Tools and Programs (https://hackforums.net/forumdisplay.php?fid=10)
+---- Thread: Deluder: EchoMirage alternative for multiplatform traffic interception in Python (/showthread.php?tid=6262823)



Deluder: EchoMirage alternative for multiplatform traffic interception in Python - majk - Feb 3, 2024

Deluder is a tool for intercepting traffic of proxy unaware applications. Currently, Deluder supports OpenSSL, GnuTLS, SChannel, WinSock and Linux Sockets out of the box. GUI is available through built-in integration with PETEP. (Serves as an alternative to EchoMirage.)

GitHub: github.com/Warxim/deluder

Currently, Deluder support the following libraries out of the box:
  • WinSock (ws2_32.dll, wsock32.dll)

  • Linux sockets (libc.so)

  • OpenSSL (libssl.dll, ssleay.dll, libssl.dylib)

  • GnuTLS (libgnutls.so, libgnutls.dll, libgnutls.dylib)

  • SChannel (Secur32.dll)



It is also possible to use Deluder with remote hosts (using Frida Server utility).

Deluder has built-in integration with PETEP, which extends Deluder with GUI.

Apart from that, Deluder can be easily extended to support other libraries through Frida's JavaScript API.