Intercept SSL Traffic - Revision history

RodWhitby: /* On the device */

2011-04-20T12:33:50Z

On the device

RodWhitby: /* Run burpsuite (must be run as root) */

2011-04-20T12:32:18Z

Run burpsuite (must be run as root)

RodWhitby at 09:21, 27 March 2011

2011-03-27T09:21:00Z

RodWhitby: /* Create a new proxy */

2011-03-27T06:08:51Z

Create a new proxy

RodWhitby: /* intercept server responses */

2011-03-27T06:05:54Z

intercept server responses

RodWhitby at 06:05, 27 March 2011

2011-03-27T06:05:33Z

RodWhitby: Created page with "Run Internet Sharing on your host, gateway address is 10.0.2.1, client wifi address is 10.0.2.x Install burpsuite (must be run as root) Assumes you want to intercept traffic to..."

2011-03-27T06:04:16Z

Created page with "Run Internet Sharing on your host, gateway address is 10.0.2.1, client wifi address is 10.0.2.x Install burpsuite (must be run as root) Assumes you want to intercept traffic to..."

New page

Run Internet Sharing on your host, gateway address is 10.0.2.1, client wifi address is 10.0.2.x

Install burpsuite (must be run as root)

Assumes you want to intercept traffic to <target-host>:<target-port>

Create a new proxy:

local listener port: 443
listen on loopback interface only: no
support invisible proxying for non-proxy-aware clients: yes
redirect to host: <target-host>
redirect to port: <target-port>
generate a CA-signed certification with a specific hostname: <target-host>

intercept client requests:
intercept-if: yes
update Content-Length: yes

intercept server responses:
intercept-if: yes
update Content-Length: yes

unpack gzip / deflate: yes

On the device:

Edit /etc/hosts
10.0.2.1 <target-host>

@@ Line 29: / Line 29: @@
 == On the device ==
-Edit /etc/hosts
+iptables -t nat -A OUTPUT -p tcp --dst <target-host> --dport <target-port> -j DNAT --to-destination <intercept-host>:<intercept-port>
 openssl s_client -connect <target-host>:<target-port> -showcerts
@@ Line 39: / Line 37: @@
 link it into /etc/ssl/certs/trustedcerts/ and /var/ssl/trustedcerts/ as <hash>.0
-openssl x509 -hash < PortSwigger.pem
+openssl x509 -hash -noout < PortSwigger.pem

@@ Line 1: / Line 1: @@
 Run Internet Sharing on your host, gateway address is 10.0.2.1, client wifi address is 10.0.2.x
-== Run burpsuite (must be run as root) ==
+== Run burpsuite ==
 Assumes you want to intercept traffic to <target-host>:<target-port>
@@ Line 7: / Line 7: @@
 === proxy listeners ===
-* local listener port: 443
+* local listener port: 8443
 * listen on loopback interface only: no
 * support invisible proxying for non-proxy-aware clients: yes

← Older revision		Revision as of 09:21, 27 March 2011
Line 31:		Line 31:
	Edit /etc/hosts		Edit /etc/hosts
	10.0.2.1 <target-host>		10.0.2.1 <target-host>
		+
		+
		+	openssl s_client -connect <target-host>:<target-port> -showcerts
		+
		+	copy the PortSwigger server CA cert into /etc/ssl/certs/trustedcerts/PortSwigger.pem
		+
		+	link it into /etc/ssl/certs/trustedcerts/ and /var/ssl/trustedcerts/ as <hash>.0
		+
		+	openssl x509 -hash < PortSwigger.pem

@@ Line 5: / Line 5: @@
 Assumes you want to intercept traffic to <target-host>:<target-port>
-=== Create a new proxy ===
+=== proxy listeners ===
 * local listener port: 443
@@ Line 12: / Line 12: @@
 * redirect to host: <target-host>
 * redirect to port: <target-port>
 * generate a CA-signed certification with a specific hostname: <target-host>

← Older revision		Revision as of 06:05, 27 March 2011
Line 22:		Line 22:
	* update Content-Length: yes		* update Content-Length: yes

		+	==== misc ====
	* unpack gzip / deflate: yes		* unpack gzip / deflate: yes