| |||||||||||||
Man-in-the-middle softwareMan-in-the-middle softwarePosted Nov 1, 2012 10:44 UTC (Thu) by epa (subscriber, #39769)Parent article: Holes discovered in SSL certificate validation
So is there an easily deployable man-in-the-middle SSL sniffer that can be used for testing? Like a live CD you can boot on a PC with two Ethernet connections and forwards the traffic, giving you a report on SSL data it was able to intercept?
(Log in to post comments)
Man-in-the-middle software Posted Nov 1, 2012 10:44 UTC (Thu) by epa (subscriber, #39769) [Link]
...or better, some purely software SSL sniffer that you can route a virtual network interface through...
Man-in-the-middle software Posted Dec 18, 2012 21:58 UTC (Tue) by speculatrix (guest, #62766) [Link]
http://portswigger.net/burp/
fantastic powerful tool for intecepting https traffic, modifying requests and responses, as well as logging.
|
|||||||||||||