To understand which way traffic to your proxy server takes. You are not saying what OS your User machine is running, but try some commands along the lines of traceroute 172.27.0.50 In case it is an inhouse proxy, it can be reached from the User machine 192.168.1.5 either through the default gateway 192.168.1.1 or there must be a separate route defined to that network. Question: Is that some in-house proxy or is the proxy possibly provided by your ISP? Obviously, your proxy server sits on an entirely different network segment than your other three machines.
You mention three distinct machines in your scenario:īut in order to better understand what's going on, you need to clear that there is another machine here, so the list would be:
You will have to ask yourself how bettercap can get a hold of traffic. I don't have any access to target machine. All its traffic is passing through the gateway only. My target is using IE 11 with on Windows 7 with proxy configured. User-Agent: Mozilla/5.0 (Windows NT 6.1 Trident/7.0 rv:11.0) like Gecko My question is more towards topological scenario.and how to overcome that.? Bettercap is working perfectly.Īnd getting this output You're using bettercap as a normal HTTP(S) proxy, it wasn't designed to handle CONNECT requests: Is it possible in such a setup to intercept traffic with bettercap? Is there any other way to achieve the same without bettercap? bettercap -T 192.168.1.5 -proxy -P POST I guess this is normal since with proxy traffic is going to the proxy server rather than the gateway. But as soon as a proxy is set in the browser connection settings, bettercap is unable to see traffic. With no proxy configured it is working fine. Using bettercap, how can I intercept traffic which goes to a proxy server which is configured in browser?