full-disclosure - Re: Tool for SSL Proxy mitm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <BAY109-W31AEF48EEF6180358C0B7395C40@phx.gbl>
Date: Tue, 20 May 2008 13:09:27 -0400
From: "M. Shirk" <shirkdog_list@...mail.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: Re: Tool for SSL Proxy mitm

>I could try to do some API hooking 

Good, get on it...

Shirkdog
' or 1=1-- 

http://www.shirkdog.us

> Date: Tue, 20 May 2008 12:06:07 -0400
> From: fractalg@...hspeedweb.net
> To: full-disclosure@...ts.grok.org.uk
> Subject: [Full-disclosure] Tool for SSL Proxy mitm
> 
> Hello,
> 
> I'm looking for a SSL proxy to do a mitm against a specific software.
> Since there is certificate verification, what I'm thinking is to modify
> the program certificates so it can communicate with the proxy and then
> have the proxy communicate with the final server with legit identification
> grabbed from the program.
> My objective is to snoop what is being sent. I could try to do some API
> hooking but still not explored this on Mac OS X. Anyone knows some good
> reading for hooking on Tiger ?
> 
> Thanks,
> fG
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_________________________________________________________________
E-mail for the greater good. Join the i’m Initiative from Microsoft.
http://im.live.com/Messenger/IM/Join/Default.aspx?source=EML_WL_ GreaterGood
Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/