Full Disclosure mailing list archives

Re: MiTM with https there are any tools ?


From: "Francisco Amato" <famato () infobyte com ar>
Date: Mon, 6 Mar 2006 14:04:37 -0300

Try using Paros Proxy
www.parosproxy.org

[ISR] - Infobyte Security Research
http://www.infobyte.com.ar

On 3/6/06, Alehandro Dias <cocainna () gmail com> wrote:

Hi,

I need to conduct a test to get the unencrypted https traffic from a source,
but dont know if there are any tools to do that.
I am able to fake a dns entry, so he thinks i am www.hotmail.com (example).

There are tools to setup a fake weserver (or proxy) that will redirect the
queries to the true website, storing the clear data ?
I imagine ettercap dont help in this situation.

Thnx
_______________________________________________
Full-Disclosure - We believe in it.
Charter:
http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: