full-disclosure - Tool for SSL Proxy mitm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 20 May 2008 12:06:07 -0400 (EDT)
From: "fG" <fractalg@...hspeedweb.net>
To: full-disclosure@...ts.grok.org.uk
Subject: Tool for SSL Proxy mitm

Hello,

I'm looking for a SSL proxy to do a mitm against a specific software.
Since there is certificate verification, what I'm thinking is to modify
the program certificates so it can communicate with the proxy and then
have the proxy communicate with the final server with legit identification
grabbed from the program.
My objective is to snoop what is being sent. I could try to do some API
hooking but still not explored this on Mac OS X. Anyone knows some good
reading for hooking on Tiger ?

Thanks,
fG

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/