Modlishka is a reverse proxy tool for penetration testing and security research that intercepts and modifies browser-based HTTP traffic.
The tool solves the problem of testing authentication defenses by acting as a man-in-the-middle proxy capable of transparently proxying multi-domain traffic over a single domain without requiring clients to install additional certificates. It introduced a novel approach to handling TLS and non-TLS traffic that enables it to bypass many common two-factor authentication implementations, demonstrating weaknesses in real-world authentication schemes. The proxy automatically handles most websites without requiring templates and supports pattern-based JavaScript payload injection for credential harvesting and session manipulation.
Modlishka is designed for authorized security professionals conducting ethical phishing penetration tests and authentication security assessments. It suits organizations wanting to evaluate their defenses against adversary-in-the-middle attacks and identify gaps in two-factor authentication implementations. The tool's stateless design allows scaling through DNS load balancing, and it includes a web panel plugin for credential management and session impersonation. It runs on Windows, macOS, Linux, and BSD, configured through command-line options or JSON files. The README positions this as a research tool for raising awareness about authentication weaknesses rather than comparing it to alternative proxies.
The project maintains active development with automated testing workflows. Code review processes are in place to ensure quality contributions. The tool continues to receive updates addressing both core functionality and security considerations for its use in authorized testing scenarios.
