OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] Tool for SSL Proxy mitm

From: Yann (yann_eadsyahoo.fr)
Date: Wed May 21 2008 - 06:31:46 CDT


If you're looking for an HTTPS proxy, Charles may help you : http://www.charlesproxy.com/ I think (can't verify since this URL is blocked by my company proxy) it also works on Mac OS. > -----Message d'origine----- > De : full-disclosure-bounceslists.grok.org.uk [mailto:full-disclosure- > bounceslists.grok.org.uk] De la part de fG > Envoyé : mardi 20 mai 2008 18:06 > À : full-disclosurelists.grok.org.uk > Objet : [Full-disclosure] Tool for SSL Proxy mitm > > Hello, > > I'm looking for a SSL proxy to do a mitm against a specific software.. > Since there is certificate verification, what I'm thinking is to modify > the program certificates so it can communicate with the proxy and then > have the proxy communicate with the final server with legit identification > grabbed from the program. > My objective is to snoop what is being sent. I could try to do some API > hooking but still not explored this on Mac OS X. Anyone knows some good > reading for hooking on Tiger ? > > Thanks, > fG > > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ __________________________________________________ Do You Yahoo!? En finir avec le spam? Yahoo! Mail vous offre la meilleure protection possible contre les messages non sollicités http://mail.yahoo.fr Yahoo! Mail

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/