Workshop Description:

With sufficiently specific tools, all bugs are obvious. If you have hunted for web app vulnerabilities, you know how powerful a proxy like Burp Suite or ZAP can be for gaining understanding of an app, and how easy it can be to spot certain vulnerabilities just by inspecting the HTTP traffic. But HTTP is not the only protocol, and sometimes the same basic vulnerabilities exist in other places, just underneath the surface.

In this session, we will walk through the steps to create your own MITM proxy tool for a common network protocol using the Rust programming language. Learning objectives include cargo project setup, message parsing & encoding, network connectivity, and error handling. 

By the end, you should have a minimal but functional proxy that can be extended for different attack scenarios. A working understanding of TCP/IP is strongly recommended. Some basic familiarity with Rust is also recommended, but not required. 

If that sounds like fun, fire up VSCode and let's get hacking!