Timeline for Can we decrypt captured malware (Meterpreter) HTTPS/SSL traffic with the keys from memory?
Current License: CC BY-SA 3.0
4 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Nov 30, 2017 at 9:40 | comment | added | ic0ns | We'll it depends on the way meterpreter stores its keys in memory. You really have to check the memory dump for what is there. | |
Nov 29, 2017 at 4:48 | comment | added | forest | He specified that the dump was taken at the time of the connection, so the kind of data in memory is already known. | |
Aug 30, 2017 at 23:23 | review | Late answers | |||
Aug 31, 2017 at 1:48 | |||||
Aug 30, 2017 at 23:02 | history | answered | ic0ns | CC BY-SA 3.0 |