Skip to content

Instantly share code, notes, and snippets.

@jcpowermac
Created December 8, 2020 18:23
Show Gist options
  • Save jcpowermac/7db9d367cb5cad2ebde18d2434969c1a to your computer and use it in GitHub Desktop.
Save jcpowermac/7db9d367cb5cad2ebde18d2434969c1a to your computer and use it in GitHub Desktop.
vCenter: role, privileges, permissions - mitmproxy

There is a proxy already running on vCenter - assuming this proxies the various services running on vCenter via the single port (TCP 443 - https):

Modify /sdk changing the port to 28085.

root@ip-172-31-250-99 [ /etc/vmware-rhttpproxy/endpoints.conf.d ]# cat vpxd-rhttpproxy-endpoint.conf 
/sdk local 28085 redirect allow

Download mitmproxy

wget https://snapshots.mitmproxy.org/5.3.0/mitmproxy-5.3.0-linux.tar.gz

Start mitmproxy

./mitmproxy -p 28085 --mode reverse:http://127.0.0.1:8085

Watch for 500(s):

<faultcode>ServerFaultCode</faultcode>
<faultstring>Permission to perform this operation was denied.</faultstring>
<detail>
<NoPermissionFault xmlns="urn:vim25" xsi:type="NoPermission">                                                                                                                                                                                      
<object type="Folder">group-v266</object>
<privilegeId>VirtualMachine.Config.Annotation</privilegeId>
</NoPermissionFault>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment