Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I was wondering what ways there are to MiTM a client link to the server where I would give them a public key that they would then send their data via https://example.com using my key.

Then without their knowledge I decode it on my machine, reencode with the real keys that my machine got from the server and pass it on creating an SSL proxy/MiTM ... I have Googled these terms constantly but only find sslstrip which is not what I need - there has to be an SSL connection.

share|improve this question

3 Answers 3

You should be using something like mitmproxy. I hope this helps you get started.

Hopefully someone else will chime in with more alternatives, as this is the only one I am familiar with.

share|improve this answer

There is a bit of information about SSL Renegotiation attacks. This is not quite what you asked though, at least I don't think this is what you asked. Can you adjust the flow of your question, as I think you have a couple of optional predicates there.

share|improve this answer
    
This is pretty much what I want accept I was thinking about it a bit different in psuedo code... client(encode)>>>>hacker(decode)>>>hacker(encode)>>>server(decode).... so there are 2 keys envolved here...but what you sent me should be fine for my tests, thanks I will have a look though any ideas on the other one then give me a shout. –  user35453 Dec 10 '13 at 16:05

Having the victim's traffic routed through your machine, the only way for the attack you're planning to work is to get the target to trust your public key. To do that, you either need to install your public key into their Trusted Root Certificates or to get them to ignore the browser's warning. This can be done using Fiddler.

So, to recap:

  1. Get the traffic through your machine.
  2. Get the target to trust your public key.
  3. Decrypt the traffic using your private key.
share|improve this answer
    
yes :) and then forward it on to the true destination is the final part –  user35453 Dec 10 '13 at 16:56

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.