0

I have been using MITM for decrypting https traffic , using tools like fiddler and burpsuite . Is there a way to decrypt packet sent over TLS, any guidance would be a real help.

2
  • I'm pretty sure this is a duplicate but I can't find the post right now. The tl;dr is that you will need the TLS master key, which means you will need have complete control over at least one of the two endpoints.
    – forest
    Commented Mar 14, 2018 at 5:55
  • I surely searched from the questions , if you find it letme know , otherwise dont mark it duplicate, thanks Commented Mar 14, 2018 at 8:25

1 Answer 1

0

Capture

  1. --> Open Fiddler
  2. --> Tools
  3. --> Fiddler Options
  4. Set the option boxes as shown in the image below:

Fiddler: Capture HTTPS instructions

Source: How do I use Fiddler to capture HTTP/HTTPS sessions for debugging?

Decrypt

If you haven't already, enable the Decrypt HTTPS traffic option, shown in the image above. You can read how to decrypt TLS traffic with Fiddler in the How come I can see full HTTPS requests via Fiddler? thread, which links to a set of instructions.

1
  • but this shows the data for https traffic not TLS , as for tls fiddler outputs tunnel to 443 Commented Mar 14, 2018 at 8:24

Not the answer you're looking for? Browse other questions tagged .