0

I have been using MITM for decrypting https traffic , using tools like fiddler and burpsuite . Is there a way to decrypt packet sent over TLS, any guidance would be a real help.

marked as duplicate by Steffen Ullrich tls Mar 14 '18 at 7:12

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • I'm pretty sure this is a duplicate but I can't find the post right now. The tl;dr is that you will need the TLS master key, which means you will need have complete control over at least one of the two endpoints. – forest Mar 14 '18 at 5:55
  • I surely searched from the questions , if you find it letme know , otherwise dont mark it duplicate, thanks – Amit Chahal Mar 14 '18 at 8:25
0

Capture

  1. --> Open Fiddler
  2. --> Tools
  3. --> Fiddler Options
  4. Set the option boxes as shown in the image below:

Fiddler: Capture HTTPS instructions

Source: How do I use Fiddler to capture HTTP/HTTPS sessions for debugging?

Decrypt

If you haven't already, enable the Decrypt HTTPS traffic option, shown in the image above. You can read how to decrypt TLS traffic with Fiddler in the How come I can see full HTTPS requests via Fiddler? thread, which links to a set of instructions.

  • but this shows the data for https traffic not TLS , as for tls fiddler outputs tunnel to 443 – Amit Chahal Mar 14 '18 at 8:24

Not the answer you're looking for? Browse other questions tagged or ask your own question.