0

I was wondering what ways there are to MiTM a client link to the server where I would give them a public key that they would then send their data via https://example.com using my key.

Then without their knowledge I decode it on my machine, reencode with the real keys that my machine got from the server and pass it on creating an SSL proxy/MiTM ... I have Googled these terms constantly but only find sslstrip which is not what I need - there has to be an SSL connection.

Improve this question

3 Answers 3

Reset to default
2

You should be using something like mitmproxy. I hope this helps you get started.

Hopefully someone else will chime in with more alternatives, as this is the only one I am familiar with.

Improve this answer
2

There is a bit of information about SSL Renegotiation attacks. This is not quite what you asked though, at least I don't think this is what you asked. Can you adjust the flow of your question, as I think you have a couple of optional predicates there.

Improve this answer
1
  • This is pretty much what I want accept I was thinking about it a bit different in psuedo code... client(encode)>>>>hacker(decode)>>>hacker(encode)>>>server(decode).... so there are 2 keys envolved here...but what you sent me should be fine for my tests, thanks I will have a look though any ideas on the other one then give me a shout.
    – user35453
    Commented Dec 10, 2013 at 16:05
1

Having the victim's traffic routed through your machine, the only way for the attack you're planning to work is to get the target to trust your public key. To do that, you either need to install your public key into their Trusted Root Certificates or to get them to ignore the browser's warning. This can be done using Fiddler.

So, to recap:

  1. Get the traffic through your machine.
  2. Get the target to trust your public key.
  3. Decrypt the traffic using your private key.
Improve this answer
1
  • yes :) and then forward it on to the true destination is the final part
    – user35453
    Commented Dec 10, 2013 at 16:56

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .