You may create a vm / lxc with docker.

Just "docker build . --tag hbs:latest" your image. Don't forget to enter your ips! Also build the nginx image if needed: "docker build ./docker/nginx/ --tag hbs-nginx:latest"

Select the variant you want to use. You may remove the variant from the docker-compose.yaml you don't need.

You'll need one network. Please reconfigure your DNS so prod.de.tbs.toys points to the ip of your reverse container. Please set rtnl.bxcl.de to the ip of the nginx container.

You'll need two networks. One is a normal LAN, the other (mitm) should have a DHCP that reconfigures the gateway-ip to the ip of the container itself. You may need to set the NET_IF variable to the mitm interface. With this variant you can inspect the RTNL log messages.

mitmproxy-ca-cert.pem in certs volume is converted to ca.der automatically. Flash it to your toniebox flash:/cert/ca.der (or flash it as flash:/cert/c2.der if using the altCA patch). This is done via:

openssl x509 -inform PEM -outform DER -in mitmproxy-ca-cert.cer -out ca.der

client-certificates as PEM into client-certs volume. (generated from client.der/private.der) They will be selected by their CN which is their MAC.

openssl x509 -inform DER -outform PEM -in client.der -out client.cer
openssl rsa -inform DER -outform PEM -in private.der -out private.key
cat client.cer private.key > client.pem

Original CA as PEM into config volume named toniebox.ca.pem. (generated from the original(!) ca.der)

openssl x509 -inform DER -outform PEM -in ca.der -out toniebox.ca.pem

Additional information about the certificates and CA.

Start the app via "docker-compose -f docker-compose.yaml up" You can access the logs via "docker logs --follow hackiebox-" Check the containers NET_IF IP with the port :8081 to check and inspect the communication You may ssh into the container via ssh root@ -p 8022

You may use the altCa/altUrl patches in slot add2/add3 to allow the certificate to be loaded from flash:/cert/c2.der and set the URL to prod.revvox / rtnl.revvox.

See: Toniebox Wiki - Traffic Sniffing