Questions tagged [tls-intercept]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
2
votes
1answer
644 views

Does SSL inspection break applications utilizing certificate pinning?

A number of popular mobile apps utilize certificate pinning, such as Facebook. Does this mean that these applications cease to function completely on corporate and academic networks that utilize SSL ...
0
votes
2answers
1k views

Why does pinning a CA root certificate not present a security risk?

AWS recommends pinning their root certificate when implementing SSL pinning. My understanding is that SSL pinning for mobile applications mitigates a situation where an attacker has installed a ...
0
votes
1answer
52 views

One domain using certificate of other domain [closed]

I recently Googled a website e.g A.com and found B.com in search result at the top. In reality A.com should be on top as B.com doesn't have anything in common or related to A.com but Google shows it ...
1
vote
1answer
1k views

Prevent bypassing of SSL Pinning in android application

I am creating an android application which is able to ping the server for certain information and return them. There are a few methods by which a user can bypass the pinned SSL certificate of an ...
0
votes
1answer
430 views

HTTPS MITM Proxy breaks HTTPS

I tried to reverse engineer an Android APP using MITMProxy, and the Server responds with an unauthenticated-error. If the whole authentication would be using headers (Basic, etc...), the Proxy should ...
1
vote
0answers
136 views

Who is responsible for Cipher selection and SSL handshake - Akamai, Load balancer, Publisher dispatcher, publisher

We have a AEM (Adobe experience manager) 6.2 application. I recently been advised to exclude/remove the weak ciphers for strict security policies. But I am not sure where shall I do the configuration ...
2
votes
0answers
696 views

How apps manage to prevent bypassing SSL pinning using Xposed framework?

We all know how to bypass SSL pinning using Xposed Framework module - SSLUnpinning. But I've found apps which cannot be bypassed this way. How do these apps prevent bypass of the SSL pinning which is ...
1
vote
1answer
341 views

Is it possible to intercept HTTPS payload with a trusted CA but send it the wrong server?

I have a CA generate a cert and private key for my server. My server, however, does not have a domain name and its IP is dynamic and never static therefore validation of the host name must be ignored ...
0
votes
0answers
213 views

Proxying an Android application with Burp Suite

I'd like to proxy an Android application with Burp Suite. The application uses certificate pinning via OkHttp3. I solved this by modifying the source code, now the application accepts the certificates ...
0
votes
2answers
338 views

How to check Google SSL certificate?

I encountered this error on Google Chrome on my Windows 10. I solved it by installing the certificate and now it is working fine. I wonder, how do I know the certificate I have is legit? That is, ...
0
votes
1answer
255 views

https: Is my company connection intercepted?

I wanted to find out whether my company can see what I'm posting online as soon as using websites using a valid https certificate. I know there are a lot of posts here about whether my company can ...
0
votes
0answers
27 views

How is a password intercepted on a website not using an SSL certificate [duplicate]

I have recently been working on an internal website at my current company. I am using Ajax and PHP to check that the username and password entered in the login fields match what is stored in the ...
0
votes
1answer
424 views

Do SSL proxies such as those from antivirus vendors hijack client processes?

In an attempt to understand the topic further, the following posts were reviewed. Why is 'avast! Web/Mail Shield Root' listed as CA for google.com? Are the certificates from “skype click to call” ...
2
votes
0answers
112 views

Decrypting DH traffic in DMZ

We have various servers in our DMZ's. Some of them are behind load balancers (but only few). We also have BlueCoat SSL Visibility Appliances currently deployed in passive-tap mode (we get the inbound ...
4
votes
0answers
383 views

Why are banks largely absent from the HSTS preload list?

There seems to be widespread support for the idea that election-related websites, of all things, should be resistant to man-in-the-middle attacks. The secret ballot makes detecting and recovering from ...
0
votes
1answer
915 views

How can I know the protocol versions supported at OpenSSL1.1.0g

How can I identify the versions (TLSv1.2, TLSv1.1, TLSv1.0, SSLv3, etc.) supported in OpenSSL1.1.0g when I manually compile it from its source (NOT the one shipped with the OS like ubuntu) without ...
0
votes
1answer
285 views

Authenticating Certificate for School Wifi [duplicate]

My school wifi, which requires me to login using ny username and password, is requiring that I accept a certificate in order to connect. I don’t know if this is a trusted root certification but what ...
0
votes
1answer
87 views

What problem would there be with an open private key for developers to use?

I always find it a pain to create a new key for development and I was thinking of doing something like this both for myself and to help other developers out: Register a domain like fakesite.com Get a ...
1
vote
1answer
3k views

OWASP ZAP: How to use TLS client certificate authentication?

Is there a way to get OWASP ZAP to send a client certificate? I have an HTTPS website that receives client certificates for authentication. I have the certificates installed in the browser. ...
0
votes
2answers
142 views

Why did OCSP Must-Staple break BitDefender SSL interception

I use one of my website as a test for various TLS techniques. Recently I added OCSP Must-Staple to this domain. After a week I got a complaint from a user they were unable to visit the website. They ...
0
votes
3answers
443 views

Is it possible to intercept the payload of a secure request in plain text?

Consider we run the following request: import requests url="https://secretsub.example.com/secretpath/post.php" payload = {'secretmessage1' : 'foo','secretmessage2' : 'bar'} r = requests.post(url,...
3
votes
1answer
7k views

How can I intercept Android application's SSL traffic where SSL pinning is used?

I want to capture the SSL traffic of an Android Application which I think uses SSL pinning. I've tried running an app which says it uses VPN Tunneling and a Root Certificate to capture the SSL ...
3
votes
1answer
943 views

Self-signed certs on LAN shared with others [duplicate]

My WiFi is shared with my family, and my siblings have friends come over sharing the WiFi password carelessly. Anyone of those guests could have a rogue device and not even know it. My brother has ...
0
votes
1answer
100 views

How SSL Handshake recognise any attack

I already know that a replay attack on an SSL handshake is ineffective, but if we suppose that an "intruder" has listened and has got all of the information from a previous handshake, how will the ...
2
votes
1answer
1k views

iOS traffic not shown in proxy when SSL pinning enabled

I have and iOS application to test. As per the latest security fix SSL pinning is enabled in the app. But now I am not able to see any traffic related to the application in my proxy tool. But ...
2
votes
1answer
4k views

How does IPS terminate/decrypt encrypted traffic?

With regards to IPS, I am not completely across how they are supposed to terminate or decrypt encrypted traffic? It makes absolutely sense to deploy them inline, but how is traffic supposed to be ...
1
vote
1answer
2k views

Session ID in the very First Client Hello

Is it normal to have Session ID in the first Client Hello, and then the server picks it up and accepts the same Session ID and uses it in all further TLS traffic. That is the "Client or Browser" tells ...
-1
votes
1answer
52 views

Mobile device SSL Certificate generation [closed]

I have been researching about SSL certificates in mobile devices, especially in the banking sector. I have these questions and I have no idea where to find answers but here. Is there a technology ...
2
votes
3answers
204 views

Identification of TLS POODLE Vulnerability

How can I identify whether the remote server is vulnerable to TLS POODLE vulnerability? Although, there are online scanners such as Qualys SSL Labs. As per my understanding, these online scanners do ...
4
votes
1answer
12k views

How can police get someone's search history?

Sometimes I see news articles saying that someone was suspected of a crime so the police got their search history and found various google search terms etc. What are the possible ways they can do ...
-1
votes
2answers
131 views

Why have distributions default HTTP package sources instead of HTTPS [duplicate]

Many distributions have HTTP links in their sources list for packages. Proof: https://docs.parrotsec.org/doku.php/mirrors-list https://docs.kali.org/general-use/kali-linux-sources-list-repositories ...
1
vote
0answers
54 views

TLSv1.2 compatibility in client side [closed]

I'm trying to connect ejb via SSL. Server is configured for TLSv1.1. If I set my client TLS_PROTOCOL as TLSv1.0 (on the ejb side), it throws an error. If I set my client TLS_PROTOCOL as TLSv1.1 (...
1
vote
2answers
700 views

Android application interception issue

I'm a newbie to android pen testing and started off with an application. The app uses HTTPS and works fine without configuring any proxy. When a proxy like a burp suite is configured, the app ...
0
votes
1answer
349 views

Hilton and Choice Hotel websites reported insecure but valid SSL by chrome? [duplicate]

I was checking out hotel websites for reservations this weekend and noticed hotel giants Hilton and Choice websites are being reported to have valid but insecure SSL. For Choice, chrome is reporting ...
4
votes
1answer
4k views

How come I can see a full HTTPS requests via Fiddler?

I am testing a C# web API hosted on a remote server, and I am monitoring HTTPS traffic using Fiddler. What confuses me is that via Fiddler I can see all of the POST payload, headers and host URL ...
0
votes
1answer
151 views

How to run FCS_TLSS tests of for common criteria evaluation? [closed]

So we are working on making a product of one of our clients common criteria compliant. We are using tls-cc-tools for running FCS_TLSC tests but we are unable to run FCS_TLSS_EXT.1.1 test 5. Please ...
1
vote
0answers
4k views

Failed to connect to www.google.co.in:443 error in burp suite?

I am trying to intercept the https request, but I getting this error while searching anything in URL.it's hitting my burp, but I can't get any response after clicking forward button,it comes with this ...
4
votes
0answers
5k views

How does TLS 1.3 break inspection?

The latest research seems to indicate that TLS 1.3 completely breaks the MITM/proxy model of many current security tools. I don't fully understand how it does that and if there are ways around this. ...
15
votes
3answers
16k views

My school wifi asks to 'trust' a certificate on iPhones. Does this allow them to view SSL traffic?

There is a lot of confusion around this on here, so I am making this post to be sure to understand it correctly. My school uses Aruba networks wifi, and after I type my Active Directory username and ...
1
vote
3answers
2k views

Number of bytes in a TLS handshake

How can I identify precisely the exact number of bytes the ClientHello and ServerHello in a TLS traffic needs? this is for traffic analysis purpose to capture the TLS bytes of interest (client hello ...
24
votes
5answers
10k views

Can a VPN Provider MitM my SSL traffic without me noticing?

If I connect to lets say gmail over a VPN. How does the provider forward the traffic without exposing my IP, but also without breaking the SSL. Shouldn't gmail know my real IP if the traffic just gets ...
4
votes
1answer
1k views

Preventing a Burp and Intercept

I have created an authentication API to manage user sessions and the works. To log a user in, the user send their credentials to my API endpoint and it returns “true” or “false” based on their login. ...
-1
votes
1answer
1k views

How does browsers detects HSTS sites?

I have come across scenarios where we introduce a proxy which does SSL decryption and it fails on HSTS sites, e.g. Facebook, Gmail, etc. In a MITM proxy setup the Facebook page will be signed by the ...
0
votes
1answer
58 views

Seeing SSL requests in unencrypted form from a remote client [closed]

I was wondering how I could be able to see SSL requests in an unencrypted form from remote clients (specifically, my phone). I heard that you are supposed to use CA certificates, but how would I ...
3
votes
1answer
1k views

Is it secure to rely on websocket connection?

In a client-server communication scenario over secure websocket, client is authorized securely and from there on, I have two choices: Assign a unique random ID (session) and check that on subsequent ...
3
votes
2answers
935 views

Is this possible with SSLsplit?

SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both IPv4 and IPv6. For SSL and HTTPS connections, SSLsplit generates and signs forged X509v3 certificates on-the-fly, based on ...
1
vote
1answer
346 views

Can SSL traffic encrypted with a weak cypher be bruteforced?

Take the following scenario: Attacker performs a man-in-the-middle attack on Client, redirecting the DNS records of www.example.com to point to a malicious server Client connects to the malicious ...
1
vote
1answer
3k views

If SSL private key is compromised, what can they do?

If a 3rd party who is malicious manages to get a hold of a SSL private key for domain (ex: xyz.com), but does not have access to the domain registrar or DNS for the domain, how can the 3rd party ...
7
votes
2answers
635 views

What happens if my VPN drops momentarily while using an SSL connection?

The Situation I am in an office with a connection that is routed through a BigIP firewall, with SSL interception; our computers have a root certificate to permit the intercept certs. If I browse to a ...
2
votes
2answers
179 views

Must TLS also accept unencrypted messages?

A co-worker insists that TLS can't be configured to insist upon messages encrypted with known keys/cyphers -- ie, that plaintext requests will always be accepted. This would leave TLS unable to reject ...