|
When I use browser or wget to access another site, some sites will only use HTTPS / SSL automatically. When a site doesn't provide content without encryption, how do I capture what my computer sends for analysis? Is it possible for me to disable SSL with my browser or wget? I'm running Linux, and would like to use tcpdump or other Linux tools for this. |
||||
|
|
|
Tools such as this SSL MITM proxy from Stanford can automatically generate certificates and provide an SSL-to-SSL cutover. You'll need to set the key used by the proxy to be trusted by your browser, but that will provide you with the ability to see the cleartext traffic that is leaving from your machine. While you can try to rewrite any HTTPS redirect requests to have HTTP, many website that provide HTTPS support will only provide content over the encrypted channel; the unencrypted channel provides nothing but redirects. Moxie Marlinspike's SSL Strip will probably also fulfill your goal by transiting the HTTPS traffic, but only speaking with your client using HTTP and rewriting redirects. |
|||
|
|
|
If you are on Windows, try using Fiddler2. It has an SSL proxy that will strip SSL for you so that you can see the packets going to and from your machine. |
|||||
|
|
when you browse to http://plus.coogle.com - it responds with a HTTP 301 response "moved permanently" and redirects to https://plus.google.com If you use an intercept proxy, use an environment variable to set the proxy name and set proxy parameters on the wget cmdline. |
||||
|
|
