full-disclosure - Re: Tool for SSL Proxy mitm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 21 May 2008 11:31:46 +0000 (GMT)
From: Yann <yann_eads@...oo.fr>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Tool for SSL Proxy mitm

If you're looking for an HTTPS proxy, Charles may help you :
http://www.charlesproxy.com/


I think (can't verify since this URL is blocked by my company proxy) it also works on Mac OS.

 
> -----Message d'origine-----
> De : full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-
> bounces@...ts.grok.org.uk] De la part de fG
> Envoyé : mardi 20 mai 2008 18:06
> À : full-disclosure@...ts.grok.org.uk
> Objet : [Full-disclosure] Tool for SSL Proxy
mitm
> 
> Hello,
> 
> I'm looking for a SSL proxy to do a mitm against a
specific software..
> Since there is certificate verification, what I'm
thinking is to modify
> the program certificates so it can communicate with
the proxy and then
> have the proxy communicate with the final server
with legit identification
> grabbed from the program.
> My objective is to snoop what is being sent. I could
try to do some API
> hooking but still not explored this on Mac OS X.
Anyone knows some good
> reading for hooking on Tiger ?
> 
> Thanks,
> fG
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia -
http://secunia.com/

__________________________________________________
Do You Yahoo!?
En finir avec le spam? Yahoo! Mail vous offre la meilleure protection possible contre les messages non sollicités 
http://mail.yahoo.fr Yahoo! Mail 
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/