Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 14:26

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 
Author Message
 Post subject: SSL / https decrypting on the fly ?
PostPosted: 17 Nov 2010 02:12 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
i have talked about it with Luigi a bit, but i tought its best to post it up in public, there might be ppl who knows this already.

i have tried to decrypt SSL without success, any ideas ?
Luigi told me to use stcppipe, but on some reason it doesnt work for me.
i did this:
stcppipe -d "C:/blahdoh/" -S support.steampowered.com 443 443
and then visited 127.0.0.1, but nothing happend. stcppipe did not recieve anything. i also tried https://127.0.01 and using port too, like 127.0.0.1:443 (all possible combinations), but nothing.

i have googled a lot and seen those threads about WireShark and stuff, but it makes no sense. you cant really get the RSA PRIVATE KEY, can you ?
i also found something called Komodia, which suppouse to decrypt any and all SSL connections on the fly, but its not free and theres no cracks out there + their free SSL sniffer doenst work either.

what i need, is to see SSL traffic in plain text. lets say i visit support.steampowered.com and im able to see all the data.


Top
 Profile  
 
 
 Post subject: Re: SSL / https decrypting on the fly ?
PostPosted: 07 Dec 2010 10:45 

Joined: 07 Dec 2010 10:38
Posts: 5
Have you tried using Fiddler? That allows you to see the SSL traffic...


Top
 Profile  
 
 Post subject: Re: SSL / https decrypting on the fly ?
PostPosted: 08 Dec 2010 21:30 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
nice one. its weird that fiddler never showed up in any of the google searches what i tried. i searched for weeks (not 24/7 obviously), but found nothing like it.

however i have problem with it. i googled, but they make no sense as usual, leaving out details, which are important.

i get this

Quote:
creation of the interception certificate failed
makecert.exe returned -1073741515

and then after i click ok i get this
Quote:
creation of the root certificate was not successful

after this:
Quote:
certificate generation failed for www.address.here


what i found on google, they say that its caused from previous installation blabla, but i never had it before.
also some ppl saying it happens on xp sp3 and has something to do with .NET framework.
oh well ... i start messing with it.


Top
 Profile  
 
 Post subject: Re: SSL / https decrypting on the fly ?
PostPosted: 11 Dec 2010 15:33 

Joined: 24 Sep 2007 02:12
Posts: 1114
Location: http://sethioz.co.uk
ignore that, this issue occurs only on my primary OS.

however this will not be able to decrypt applications like pokerstars, cuz they dont accept those certificates. certificate have to be real.
i also found "charles", but i think it has same issues.


Top
 Profile  
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 4 posts ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: