sslsplit
sslsplit copied to clipboard
droe
Transparent SSL/TLS interception
First off, I appreciate all the work you put into this great tool! Would there be a way to implement outputting the decrypted traffic to a "raw" interface, maintaining source...
basic info: ``` sslsplit -V SSLsplit 0.5.5 (built 2020-11-17) Copyright (c) 2009-2019, Daniel Roethlisberger https://www.roe.ch/SSLsplit Build info: V:FILE HDIFF:0 N:83c4edf Features: -DHAVE_NETFILTER -DWITHOUT_MIRROR NAT engines: netfilter* tproxy netfilter: IP_TRANSPARENT IP6T_SO_ORIGINAL_DST...
I noticed that `sslsplit autossl` currently only removes the topmost TLS layer instead of all. E.g. when connecting to a https website over a https proxy the proxy layer will...
Hi, I notice that funtion time(), gmtime() and strftime() are frequently used in the log.c. Here is an example of the usages, as shown in the following code, function time(),...
Hello, I am trying to use sslsplit on a client that has both IPv4 and IPv6 capabilities connected to an upstream MITM system bridged interface that also has both IPv4...
How properly to use original application certificates running in Openwrt, I have cacert.pem, newcert.pem and key cert like newkey.pem ? I cant use self generated certificates for application. -k /tmp/ssl/newkey.pem...
I am currently trying to intercept some iot devices traffic. The problem with that the iot device is, that the clock isn't necessarily on the todays date. it may be...
Per the `ssl_x509_forge` function, it looks like there's support for adding extra SANs to the generated certificates: https://github.com/droe/sslsplit/blob/657b70b4ac2a3559fda8c700e5b003094ef6ca3d/ssl.c#L966-L967 However, in `pxyconn.c`, this is always set to `NULL` if generating a...
I'm running sslsplit with the -T and -I options, mirroring decrypted streams to a local IFB interface ifb0. This works, but the issue is that sslsplit insists on doing an...
