Sign up ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

I'm looking for SSL proxy capable of dumping requests.

I want to test custom browser against SSL-MITM attacks.

I'm able to re-route all traffic ongoing from browser to machine with proxy.

Basically proxy should:

  • initiate SSL connection with legitimate website
  • issue self-signed certificate
  • pass data received from legitimate website to browser
  • capture requests issued by browser
share|improve this question

closed as off-topic by Xander, TildalWave, RoraΖ, schroeder, Jens Erat Jan 24 at 0:15

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

3 Answers 3

up vote 7 down vote accepted

Burp Suite is one of the best.

share|improve this answer

If you want a stand alone app, Fiddler works nicely with SSL capture enabled.

share|improve this answer
Does it works also like proxy? If browser is on machine A and proxy is on machine B? – pixel Dec 30 '10 at 15:22

I typically use Burp Proxy - it seems to do everything you would need. Or if you want to do more, the entire Burp Suite does a huge amount. It is my first goto tool for the automated part of a security assessment, allowing me to spider an application, run scripts, test for particular vulnerabilities, and even an element for fuzzing/sequencing.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.