Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [tls-intercept]

The tag has no usage guidance.

0
votes
0answers
66 views

HTTPS MITM Proxy breaks HTTPS

I tried to reverse engineer an Android APP using MITMProxy, and the Server responds with an unauthenticated-error. If the whole authentication would be using headers (Basic, etc...), the Proxy should ...
0
votes
0answers
85 views

SSLStrip demonstration with bettercap 2.x

I'm trying to get bettercap 2.x working for an sslstrip proof of concept demonstration. I'm running it against a site that I know doesn't properly implement HSTS, found from several blogs. The site ...
0
votes
1answer
135 views

Do SSL proxies such as those from antivirus vendors hijack client processes?

In an attempt to understand the topic further, the following posts were reviewed. Why is 'avast! Web/Mail Shield Root' listed as CA for google.com? Are the certificates from “skype click to call” ...
2
votes
0answers
67 views

Decrypting DH traffic in DMZ

We have various servers in our DMZ's. Some of them are behind load balancers (but only few). We also have BlueCoat SSL Visibility Appliances currently deployed in passive-tap mode (we get the inbound ...
1
vote
1answer
867 views

OWASP ZAP: How to use TLS client certificate authentication?

Is there a way to get OWASP ZAP to send a client certificate? I have an HTTPS website that receives client certificates for authentication. I have the certificates installed in the browser. ...
2
votes
1answer
938 views

How does IPS terminate/decrypt encrypted traffic?

With regards to IPS, I am not completely across how they are supposed to terminate or decrypt encrypted traffic? It makes absolutely sense to deploy them inline, but how is traffic supposed to be ...
4
votes
1answer
2k views

How come I can see a full HTTPS requests via Fiddler?

I am testing a C# web API hosted on a remote server, and I am monitoring HTTPS traffic using Fiddler. What confuses me is that via Fiddler I can see all of the POST payload, headers and host URL ...
0
votes
1answer
81 views

How to run FCS_TLSS tests of for common criteria evaluation? [closed]

So we are working on making a product of one of our clients common criteria compliant. We are using tls-cc-tools for running FCS_TLSC tests but we are unable to run FCS_TLSS_EXT.1.1 test 5. Please ...
2
votes
2answers
82 views

Must TLS also accept unencrypted messages?

A co-worker insists that TLS can't be configured to insist upon messages encrypted with known keys/cyphers -- ie, that plaintext requests will always be accepted. This would leave TLS unable to reject ...
-5
votes
1answer
120 views

Is getting intercept request of HTTPS in clear text is a bug [closed]

I am new in pentesting so I don't know what to expect. I am intercepting HTTPS requests of Android apps in my phone through Fiddler for pentesting purposes. I have installed the Fiddler certificate on ...
0
votes
1answer
1k views

Is CloudFlare's SSL half-baked since they become the Man-in-the-Middle (MitM)? [duplicate]

I recently read a somewhat funny article at crimeflair.net, questioning (read: murdering) the way CloudFlare provides SSL. In their words: "CloudFlare's half-baked SSL: suspicious sockets layer". ...
1
vote
0answers
206 views

Burpsuite proxy on the same network

Scenario: A test server has a deployed build on there ready for testing, can i use burpsuite/ZAP on my local computer if the server is on the same network? Am i somehow skewing the results and the ...
1
vote
1answer
110 views

How can I snoop on a mutually authenticated SSL connection?

Our company connects to an external service through an outdated library (using a PHP extension for an older version of PHP). As this requires us to have a server setup in isolation for this service, I ...
3
votes
1answer
680 views

Can I use CloudFlare if I want to avoid NSA and FISA secret orders? [closed]

We're running a web service in Europe, secured with TLS and we're using private keys generated on our private hardware. We would like to use CloudFlare for DDoS protection and caching reverse proxy. ...
2
votes
1answer
557 views

Chrome Internal Certificate Authority List for SSL + EV

Chrome specifies that it maintains a internal "hard-coded" list of root certificates that are "EV-Qualified". https://www.chromium.org/Home/chromium-security/root-ca-policy#TOC-Extended-Validation-...
2
votes
3answers
579 views

SSL interception with client certificate

I want to intercept a ssl-encrypted tcp-stream. I have the privat key and the certificat of the server and of the client. But how can I intercept the connection. Is there a intercepting-proxy with ...
1
vote
1answer
382 views

Decrypt TLS traffic on same machine (Mac + mitmproxy/other)

I have a Mac-only application that I need to network-debug, but the application uses TLS. Is there a way I could debug the network traffic of that application with mitmproxy (or any other software) ...
8
votes
1answer
1k views

Hooking into firefox memory

I am trying to learn how to hook into the browser memory. The Frida tool is a good start to this. My goal is to extract the client-random, server-random and symmetric session keys established at the ...
2
votes
3answers
2k views

Is SSL Interception possible without disabling Public Key Pinning on the client side?

I'm currently setting up a pfSense firewall in my lab. It supports SSL Inception which works pretty well for most sites. But there are some sites which use HTTP Public Key Pinning to prevent MitM ...
1
vote
0answers
211 views

What's going on with connections to/from bluecoat?

I'm trying to track down a cause on an Internal Server Failure for an Apache server. The IP address changed recently, so I thought the crash might be related. A quick search of the old IP: $ sudo ...
3
votes
1answer
2k views

Can firewalls decrypt SSL packets?

I was wondering if the firewall has the ability to decrypt the SSL traffic. If so, the network admin is able to read the data in clear text at transit.
1
vote
1answer
4k views

Is it possible to utilize an outbound proxy to upgrade to TLS

Given a situation where legacy technology exists from a system and we don't want to do a complete upgrade (.net in this case w/ version that doesn't have any support for TLS 1.1/1.2) as the product ...
9
votes
3answers
2k views

Are future TLS versions going to prevent traffic inspection?

Nowadays it is possible to inspect (unencrypt) TLS (HTTPS) traffic inside an organization. The mechanism consists in using a root CA that is configured in the web client and a network device that ...
0
votes
1answer
188 views

What's the best practice for MitM'ing https traffic to distinguish self-signed certs?

My organisation is concerned about viruses and attacks coming into our network. Since http traffic has been declared persona non grata by some browser makers and other parties, it becomes ...