full-disclosure - MiTM with https there are any tools ?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon Mar  6 17:04:45 2006
From: famato at infobyte.com.ar (Francisco Amato)
Subject: MiTM with https there are any tools ?

Try using Paros Proxy
www.parosproxy.org

[ISR] - Infobyte Security Research
http://www.infobyte.com.ar

On 3/6/06, Alehandro Dias <cocainna@...il.com> wrote:
>
> Hi,
>
> I need to conduct a test to get the unencrypted https traffic from a source,
> but dont know if there are any tools to do that.
> I am able to fake a dns entry, so he thinks i am www.hotmail.com (example).
>
> There are tools to setup a fake weserver (or proxy) that will redirect the
> queries to the true website, storing the clear data ?
> I imagine ettercap dont help in this situation.
>
> Thnx
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
>