google/nogotofail

Health v2 · maintenance only

Flags: archived

Adoption not part of the score

2951 stars · 410 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Nogotofail is an on-path (man-in-the-middle) blackbox network traffic security testing tool built in Python. It detects weak TLS/SSL connections, certificate verification bugs, SSL/STARTTLS stripping, and cleartext traffic on devices and applications.

Use cases

• test apps for weak TLS/SSL connections
• detect cleartext traffic leaking sensitive data
• find SSL certificate verification bugs
• test for SSL and STARTTLS stripping vulnerabilities
• audit network traffic of Android or IoT devices
• verify HTTPS implementations during security reviews

When to choose

• you need blackbox TLS/SSL vulnerability testing of devices or apps on your network
• you want to detect cleartext and downgrade attacks transparently via iptables on Linux
• you're doing security research or app traffic audits

When to avoid

• you need a modern actively developed tool (Python 2.7 dependency, sparse releases)
• you need Windows or macOS transparent capture support
• you want automated CI security scanning rather than interactive network testing

Facets

cli-tool · maturity maintenance

security penetration-testing networking testing security penetration-testing networking developer-tools python cli tls ssl mitm traffic-analysis vulnerability-scanning linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="google/nogotofail")