<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div>
<p class="MsoPlainText"><o:p>If you're looking for an HTTPS proxy, Charles may help you :</o:p></p><p class="MsoPlainText"><o:p><a href="http://www.charlesproxy.com/">http://www.charlesproxy.com/</a><br></o:p></p><p class="MsoPlainText"><o:p><br></o:p></p><p class="MsoPlainText"><o:p>I think (can't verify since this URL is blocked by my company proxy) it also works on Mac OS.<br></o:p></p><p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">> -----Message d'origine-----</p>
<p class="MsoPlainText">> De : full-disclosure-bounces@lists.grok.org.uk
[mailto:full-disclosure-</p>
<p class="MsoPlainText">> bounces@lists.grok.org.uk] De la part de fG</p>
<p class="MsoPlainText">> Envoyé : mardi 20 mai 2008 18:06</p>
<p class="MsoPlainText">> À : full-disclosure@lists.grok.org.uk</p>
<p class="MsoPlainText">> Objet : [Full-disclosure] Tool for SSL Proxy
mitm</p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> Hello,</p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> I'm looking for a SSL proxy to do a mitm against a
specific software.</p>
<p class="MsoPlainText">> Since there is certificate verification, what I'm
thinking is to modify</p>
<p class="MsoPlainText">> the program certificates so it can communicate with
the proxy and then</p>
<p class="MsoPlainText">> have the proxy communicate with the final server
with legit identification</p>
<p class="MsoPlainText">> grabbed from the program.</p>
<p class="MsoPlainText">> My objective is to snoop what is being sent. I could
try to do some API</p>
<p class="MsoPlainText">> hooking but still not explored this on Mac OS X.
Anyone knows some good</p>
<p class="MsoPlainText">> reading for hooking on Tiger ?</p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> Thanks,</p>
<p class="MsoPlainText">> fG</p>
<p class="MsoPlainText">> </p>
<p class="MsoPlainText">> _______________________________________________</p>
<p class="MsoPlainText">> Full-Disclosure - We believe in it.</p>
<p class="MsoPlainText">> Charter:
http://lists.grok.org.uk/full-disclosure-charter.html</p>
<p class="MsoPlainText">> Hosted and sponsored by Secunia -
http://secunia.com/</p>
</div></div><br>__________________________________________________<br>Do You Yahoo!?<br>En finir avec le spam? Yahoo! Mail vous offre la meilleure protection possible contre les messages non sollicités <br>http://mail.yahoo.fr Yahoo! Mail </body></html>