View unanswered posts | View active topics It is currently Mon Sep 25, 2017 4:45 pm



Post new topic Reply to topic  [ 3 posts ] 
 SSL Decryption 
Author Message

Joined: Wed Oct 28, 2009 10:48 pm
Posts: 1
Reply with quote
Post SSL Decryption
Hi All

I am testing some things with xplico and want to decrypt ssl traffic. Is it possible to do? I've the private key of the sessions but no idea where to implement it...

big thanks in advance

StiX


Wed Oct 28, 2009 10:54 pm
Profile
Site Admin

Joined: Wed Sep 16, 2009 10:09 pm
Posts: 394
Reply with quote
Post Re: SSL Decryption
Hi StiX,
at the moment there is no ssl dissector.
However, we have already studied the problem. Our intention is not to use the code of Wireshark but rather use a good library developed by Vladimir Shcherbakov of Atomic Labs.
The name of library is DSSL at can be found here ( The Pion projects are very interesting ) .
One of the advantages of this library is that we can use only the SSL decryption layer and then our ssl-dissector can be "connected" at the tcp dissector.
The ssl-dissector was designed so that it can be used in two modes provided by Xplico:
- cascade mode (a dissector depends on another dissector)
- internal mode (a dissector call an other dissector)

For example:
https (cascade mode): eth->ip->tcp[443]->ssl->http
pop after STARTTLS command (internal mode): eth->ip->tcp[110]->pop(ssl)

Development is not complicated... but we do not have the time :( .
Xplico is funded only by our free time. We have many ideas, but we do not have much free time ;) .


Thu Oct 29, 2009 8:25 pm
Profile WWW

Joined: Tue Oct 06, 2009 7:58 am
Posts: 71
Reply with quote
Post Re: SSL Decryption
ok


Wed Jan 27, 2010 10:08 am
Profile
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group.
Designed by Vjacheslav Trushkin for Free Forums/DivisionCore.