Harry Sintonenharrysintonen@infosec.exchange

Oct 22, 2026, 6:49 PM

@davec555 It's for hackers. Basically, it's a tool that allows you to peek into and tamper with TLS-protected connections. This is quite useful if you, for some reason, want to look into what some closed platform device is actually doing, or if you're tasked to assess the security of some device or software.

Generally, when you're using tools like this, you need to install the provided root certificate for it to function. With the #eMudrha incident, this step can be skipped (at least in some cases). The new --emudhra option enables this mode of operation.

It can be useful for end users as well, if you're technically inclined and wish to see what your fridge or TV is actually doing when it's calling back home. There is a learning curve, however. Here's a fairly good primer: https://earthly.dev/blog/mitmproxy/

Replies