Skip to main content

Questions tagged [tls-intercept]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
16 votes
3 answers
40k views

My school wifi asks to 'trust' a certificate on iPhones. Does this allow them to view SSL traffic?

There is a lot of confusion around this on here, so I am making this post to be sure to understand it correctly. My school uses Aruba networks wifi, and after I type my Active Directory username and ...
BusinessGuy's user avatar
26 votes
5 answers
13k views

Can a VPN Provider MitM my SSL traffic without me noticing?

If I connect to lets say gmail over a VPN. How does the provider forward the traffic without exposing my IP, but also without breaking the SSL. Shouldn't gmail know my real IP if the traffic just gets ...
Kenny Blankenship's user avatar
7 votes
1 answer
39k views

Disable or bypass SSL Pinning/Certificate Pinning on Android 6.0.1

Previously I have been able to bypass SSL Pinning by using the program JustTrustMe with the Xposed framework for nearly every app. https://github.com/Fuzion24/JustTrustMe However it has started to ...
Ogglas's user avatar
  • 777
4 votes
3 answers
1k views

Are TLS v1.3 connections over open Wi-Fi secure?

If a non-compromised device is connected to the internet via open Wi-Fi, anyone can view the traffic. But if all the connections to the servers use a reasonably secure cryptographic protocol (such as ...
End Antisemitic Hate's user avatar
4 votes
3 answers
3k views

Is SSL Interception possible without disabling Public Key Pinning on the client side?

I'm currently setting up a pfSense firewall in my lab. It supports SSL Inception which works pretty well for most sites. But there are some sites which use HTTP Public Key Pinning to prevent MitM ...
davidb's user avatar
  • 4,323
2 votes
1 answer
2k views

Can a HTTP proxy see HTTPS traffic?

I was checking some things with the (Chromium) inspect tool and I saw that if you go to the 'Network' section the IP address wasn't the actual DNS A (IPv4) or AAAA (IPv6) IP address but the Proxy IP ...
The Bad One's user avatar
2 votes
2 answers
11k views

Understanding SSL man-in-the-middle and its limitations

I’m trying to develop a good sense of how an SSL man-in-the-middle(s) (MITM) works. As I understand it, MITMs do their work in one of two ways: Decrypt the SSL by having a copy of the server’s ...
The_Glidd's user avatar
2 votes
1 answer
7k views

How does IPS terminate/decrypt encrypted traffic?

With regards to IPS, I am not completely across how they are supposed to terminate or decrypt encrypted traffic? It makes absolutely sense to deploy them inline, but how is traffic supposed to be ...
user178620's user avatar
1 vote
1 answer
794 views

Do SSL proxies such as those from antivirus vendors hijack client processes?

In an attempt to understand the topic further, the following posts were reviewed. Why is 'avast! Web/Mail Shield Root' listed as CA for google.com? Are the certificates from “skype click to call” ...
Motivated's user avatar
  • 1,513
9 votes
3 answers
3k views

Are future TLS versions going to prevent traffic inspection?

Nowadays it is possible to inspect (unencrypt) TLS (HTTPS) traffic inside an organization. The mechanism consists in using a root CA that is configured in the web client and a network device that ...
Eloy Roldán Paredes's user avatar
7 votes
3 answers
4k views

Hide clear SNI when using https

A server with IP address a.b.c.d is hosting multiple SSL websites. When connecting to each website, a proper browser sends a request which include the destination host in an uncrypted clear text ...
David Refoua's user avatar
5 votes
1 answer
2k views

Can I use CloudFlare if I want to avoid NSA and FISA secret orders?

We're running a web service in Europe, secured with TLS and we're using private keys generated on our private hardware. We would like to use CloudFlare for DDoS protection and caching reverse proxy. ...
Mikko Rantalainen's user avatar
5 votes
3 answers
3k views

Is it acceptable for an employer to install a self-signed root certificate on employees personal devices at home?

At work, my employer uses a self-signed root certificate to MITM all of our SSL/TLS traffic. Many of our internal certificates used by various micro-services and internal websites are also signed by ...
0xDEAD_BEEF's user avatar
5 votes
3 answers
865 views

Is implementing an SSL proxy server considered a good practice?

There are many questions on this site from users finding out that their employer has a certificate proxy in place, essentially implementing a man-in-the-middle attack so that all traffic is able to be ...
Nacht's user avatar
  • 925
5 votes
2 answers
13k views

Is there no way to bypass certificate pinning without patching apps?

Can you do anything other than patching apps' compiled-code/cert-files (which is app-specific, requires manual analysis and patching + super-user/root) to intercept TLS traffic of apps that use ...
Wis's user avatar
  • 153
4 votes
1 answer
2k views

Is it secure to rely on websocket connection?

In a client-server communication scenario over secure websocket, client is authorized securely and from there on, I have two choices: Assign a unique random ID (session) and check that on subsequent ...
Xaqron's user avatar
  • 306
4 votes
1 answer
9k views

How can I intercept Android application's SSL traffic where SSL pinning is used?

I want to capture the SSL traffic of an Android Application which I think uses SSL pinning. I've tried running an app which says it uses VPN Tunneling and a Root Certificate to capture the SSL ...
user avatar
4 votes
1 answer
5k views

How come I can see a full HTTPS requests via Fiddler?

I am testing a C# web API hosted on a remote server, and I am monitoring HTTPS traffic using Fiddler. What confuses me is that via Fiddler I can see all of the POST payload, headers and host URL ...
mko's user avatar
  • 179
3 votes
1 answer
561 views

How effective is Expect-CT against content inspection in an enterprise context?

HPKP was used to ensure that a browser accepts to connect to a site only if the public key he has on file is the one presented by the target site. I saw it as a way to make deep content inspection ...
WoJ's user avatar
  • 9,048
2 votes
1 answer
300 views

Is connection established with two way SSL as secure as SSH?

If we establish the connections between two peers using two way SSL with strict configuration(TLS1.3 ,strict cipher etc..) and disabling client initiated re-negotiation. And likewise we establish the ...
Jayesh Sahu's user avatar
2 votes
2 answers
3k views

Session ID in the very First Client Hello

Is it normal to have Session ID in the first Client Hello, and then the server picks it up and accepts the same Session ID and uses it in all further TLS traffic. That is the "Client or Browser" tells ...
Shan Jose's user avatar
2 votes
1 answer
12k views

Intercepting JSON responses on BurpSuite [closed]

By default, Burp Suite is able to intercept the request from the page, but not getting the JSON response. What rule should be added in the 'Intercept server responses' menu (in the 'Proxy > Options' ...
user avatar
2 votes
3 answers
406 views

Is this threat in SSL for real?

I was talking with a friend about how SSL can be Man-in-the-Middled with relative ease. He claimed this: Anyone can compromise the DNS request authority chain (true). Anyone can generate a custom ...
Luis Masuelli's user avatar
2 votes
1 answer
1k views

Securing a Web application using HSTS

Background I am developing a Web application using ASP.Net MVC. I deployed the application in IIS(V8) and now doing the Web app hardening process. I configured the SSL in IIS and the Web app is ...
user3496510's user avatar
  • 1,307
1 vote
1 answer
4k views

TLS interception on an Android phone

Here are the steps I've been through until I hit a problem. I have a website that runs on an HTTPS protocol serving the Android application I generally debug requests / responses via Wireshark ...
ksp0422's user avatar
  • 11
1 vote
1 answer
4k views

need an Alternative to ssl pinning for web applications

I am developing a web app and while testing it on burpsuite I found that it is vulnerable to the proxy SSL certificate. I did some research and found that it was handled by a technique called SSL ...
Bond 007's user avatar
  • 175
1 vote
1 answer
188 views

How can a site preemptively notify browsers to enforce an SSL on their domain?

I learned about this years ago and don't remember enough of the keywords to search for it appropriately. Its where sites can tell the browser that the site must not allow the site to be downgraded to ...
Gabriel Fair's user avatar
  • 1,535
1 vote
1 answer
3k views

Burp Suite - Although my configurations are correct, still Chrome doesn't allows me to access HTTPS sites and throws an error!

I'm having a hard time accessing sites with HSTS enabled via burp proxy in Chrome. Everything works perfectly fine with Firefox and IE, but Chrome has stopped working since yesterday. I've followed ...
Prateek T's user avatar
1 vote
1 answer
3k views

Android SSL trust killer mitigation?

I have implemented SSL pinning in Android application but I am able to bypass using SSL trust killer. I am looking for some solution to be able to detect or prevent such attacks. One solution is to ...
Airbourne's user avatar
  • 291
1 vote
1 answer
616 views

Is it possible to intercept HTTPS payload with a trusted CA but send it the wrong server?

I have a CA generate a cert and private key for my server. My server, however, does not have a domain name and its IP is dynamic and never static therefore validation of the host name must be ignored ...
user99999991's user avatar
1 vote
1 answer
675 views

SSL Strip Injection Point

I am reading up on SSL stripping and I have a fundamental question on the injection point that makes this MITM attack a success. I understand the typical scenario - A (victim) <-- plain --> M (...
katrix's user avatar
  • 563
0 votes
1 answer
452 views

https: Is my company connection intercepted?

I wanted to find out whether my company can see what I'm posting online as soon as using websites using a valid https certificate. I know there are a lot of posts here about whether my company can ...
tim's user avatar
  • 851
0 votes
2 answers
2k views

How are anonymous cipher suites exploited

I was testing a new proxy server today with SSL Labs and found that I had somehow included some anonymous cipher suites. After resolving the problem I decided to find out what problems this could ...
Drifter104's user avatar
0 votes
1 answer
2k views

Is CloudFlare's SSL half-baked since they become the Man-in-the-Middle (MitM)? [duplicate]

I recently read a somewhat funny article at crimeflair.net, questioning (read: murdering) the way CloudFlare provides SSL. In their words: "CloudFlare's half-baked SSL: suspicious sockets layer". ...
Bob Ortiz's user avatar
  • 6,685
0 votes
2 answers
301 views

Reasons not to preserve the certification path on an intercepting HTTPS proxy

In this environment an intercepting HTTPS proxy is used for legitimate purposes and its CA root certificate is installed on all clients. Every HTTPS proxy solution I've seen so far simply signs a new ...
Esa Jokinen's user avatar
  • 19.1k