PaulDotCom mailing list archives
Re: use cases for stunnel
From: Karl Schuttler <karl.schuttler () gmail com>
Date: Sun, 10 Apr 2011 19:56:05 -0400
Hey Robin, I've used stunnel in usb switchblades to encrypt email traffic with an attached dump of password hashes. Karl On Sun, Apr 10, 2011 at 6:50 PM, Robin Wood <robin () digininja org> wrote:
I was having a look at stunnel today and I've been wondering about pen-testing use cases for it. I asked on twitter and got a few comments about using it for encrypted data exfiltration but I don't see the point, if you are on a box with stunnel then it probably also has ssh/scp so just use that. The only solid example I was given was to use it back-to-back to man-in-the-middle SSL traffic where the parties don't do certificate checking. Are there any other good use cases? Places where there isn't already an easily available an encrypted tool that will do the same job. Robin _______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
_______________________________________________ Pauldotcom mailing list Pauldotcom () mail pauldotcom com http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
Current thread:
- use cases for stunnel Robin Wood (Apr 10)
- Re: use cases for stunnel Karl Schuttler (Apr 10)
- Re: use cases for stunnel Dennis Lavrinenko (Apr 10)
- Re: use cases for stunnel Mike Patterson (Apr 10)
- Re: use cases for stunnel Robin Wood (Apr 11)
- Re: use cases for stunnel David Porcello (Apr 11)
- Re: use cases for stunnel Robin Wood (Apr 11)
- Re: use cases for stunnel Robin Wood (Apr 11)
- Re: use cases for stunnel Joel Esler (Apr 12)