[Full-disclosure] Tool for SSL Proxy mitm

Yann yann_eads at yahoo.fr
Wed May 21 12:31:46 BST 2008


If you're looking for an HTTPS proxy, Charles may help you :
http://www.charlesproxy.com/


I think (can't verify since this URL is blocked by my company proxy) it also works on Mac OS.

 
> -----Message d'origine-----
> De : full-disclosure-bounces at lists.grok.org.uk
[mailto:full-disclosure-
> bounces at lists.grok.org.uk] De la part de fG
> Envoyé : mardi 20 mai 2008 18:06
> À : full-disclosure at lists.grok.org.uk
> Objet : [Full-disclosure] Tool for SSL Proxy
mitm
> 
> Hello,
> 
> I'm looking for a SSL proxy to do a mitm against a
specific software..
> Since there is certificate verification, what I'm
thinking is to modify
> the program certificates so it can communicate with
the proxy and then
> have the proxy communicate with the final server
with legit identification
> grabbed from the program.
> My objective is to snoop what is being sent. I could
try to do some API
> hooking but still not explored this on Mac OS X.
Anyone knows some good
> reading for hooking on Tiger ?
> 
> Thanks,
> fG
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia -
http://secunia.com/

__________________________________________________
Do You Yahoo!?
En finir avec le spam? Yahoo! Mail vous offre la meilleure protection possible contre les messages non sollicités 
http://mail.yahoo.fr Yahoo! Mail 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20080521/43e5512b/attachment.html 


Full-Disclosure is hosted and sponsored by Secunia.