<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
>I could try to do some API hooking <br><br>Good, get on it...<br><br>Shirkdog<br>' or 1=1--
<br>http://www.shirkdog.us<br><br>> Date: Tue, 20 May 2008 12:06:07 -0400<br>> From: fractalg@highspeedweb.net<br>> To: full-disclosure@lists.grok.org.uk<br>> Subject: [Full-disclosure] Tool for SSL Proxy mitm<br>> <br>> Hello,<br>> <br>> I'm looking for a SSL proxy to do a mitm against a specific software.<br>> Since there is certificate verification, what I'm thinking is to modify<br>> the program certificates so it can communicate with the proxy and then<br>> have the proxy communicate with the final server with legit identification<br>> grabbed from the program.<br>> My objective is to snoop what is being sent. I could try to do some API<br>> hooking but still not explored this on Mac OS X. Anyone knows some good<br>> reading for hooking on Tiger ?<br>> <br>> Thanks,<br>> fG<br>> <br>> _______________________________________________<br>> Full-Disclosure - We believe in it.<br>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html<br>> Hosted and sponsored by Secunia - http://secunia.com/<br><br /><hr />E-mail for the greater good. <a href='http://im.live.com/Messenger/IM/Join/Default.aspx?source=EML_WL_ GreaterGood' target='_new'>Join the i’m Initiative from Microsoft.</a></body>
</html>