Linked Questions

1
vote
1answer
193 views

Intercept https traffic [duplicate]

Is it possible for a packet sniffer such as wireshark to be able to decrypt the traffic generated by a https connection from a browser ? I do not have control of the server, but I have control of the ...
1
vote
0answers
121 views

Wireshark Decoding TLS Encripted Data From My Own Computer [duplicate]

I'm trying to analyse the data that is being sent between my own computer and a web server via HTTPS. I'm using Wireshark to examine the packets, however I can't see any of the data as it has been ...
24
votes
2answers
20k views

Extract pre-master keys from an OpenSSL application

Consider an application using OpenSSL which has a bug. A packet capture of the full SSL session is available, as well as a core dump and debugging symbols for the application and libraries. A RSA ...
17
votes
3answers
4k views

Why do Firefox and Chrome “leak” critical security information out of the browser and how can I stop it?

In studying SSL / TLS handshakes and encryption, I found a method that describes how to export the SSL / TLS session keys from Firefox to an user or environmental variable outside the browser, and ...
4
votes
3answers
5k views

How can one decrypt a SSL/TLS session? Besides the private key what else is needed?

Suppose I have a non-DHE-based TLS session stored in a Wireshark or Netmon trace. What is required to decrypt this data? Is the private key of the certificate all that would be needed? What ...
4
votes
3answers
16k views

How to troubleshoot “client certificate” related errors in 2 way HTTPS

I have a webserver which is asking for client certificate for mutual authentication. I have what I think is the right certificate loaded into my client browser. However, the browser is not able to ...
2
votes
3answers
6k views

Why different key exhange techniques for ssl key exchange?

During ssl key exchange, I have read that sending the symmetric key to the server encrypted with the server's public key is an old technique. Now for key echange Diffie hellman and other techniques ...
7
votes
2answers
1k views

Can symmetric key cryptography provide identification?

I understand that PKI uses digital certificates to link a public key to an entity, but is there anything similar for symmetric cryptography. If, theoretically, PKI didn't exist, how do you know you ...
1
vote
1answer
3k views

Difference openssl s_client vs stunnel

I'm accessing a SSL-protected web-service. On the one hand, if I access this web-service with openssl s_client, copying the relevant http POST request from a file html-request, I get a HTTP/1.1 200 ...
3
votes
1answer
3k views

Setup Wireshark to decrypt TLS_DHE

I have a passively sniffed traffic dump of client/server were packets are encrypted with cipher suite Cipher Suite: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e) With a Logjam attack I managed to ...
-1
votes
1answer
3k views

tcpdump and HTTPS [duplicate]

The tcpdump manual says that it can dump HTTPS packets. I guess this means just a bunch of encrypted data. If I send an HTTPS request with my browser via my router to the rest of the world and the ...
0
votes
0answers
2k views

View the access code, access token, and id token from Google during an OpenID Connect flow

Situation We're wanting to use an HTTP logger/proxy/analyzer to inspect the access code, access token, and id token that are part of the code flow. The flow is happening among Google (the ...
0
votes
1answer
1k views

Decrypting application data from pcap

Full disclosure I am front end developer with hardly any knowledge of security trying to complete a security challenge. All info below I picked up in the last 12 hours so if it doesn’t make sense feel ...
0
votes
3answers
983 views

Best options for SSL inspection while maintaining Perfect Forward Secrecy

We are looking to monitor inbound HTTPS connections for performance issues as well as errors. HTTP requests we are able to gather this information just fine, but we don't have a way to do this while ...
0
votes
1answer
968 views

How to decrypt Diffie-Hellman in wireshark?

How can i decrypt Diffie-hellman TCP packets? I'm trying to make a tool that shows cleartext response from a server that uses this encryption. However when i look online people all seem to say it's ...

15 30 50 per page