The open-source tools tcpflow and netcat are very useful for inspecting *unencrypted* streams across the network. However, they break down with content encrypted using OpenSSL. This makes it much harder to diagnose problems.
Has anyone successfully patched the source code of libssl in such a way as to pass the input (upstream of encryption) and the output (downstream of decryption) somewhere else besides the calling program?
** EDIT **
I think you are misunderstanding me ….. I'm not trying to crack SSL encryption. What I want to do is patch /usr/lib/libssl.so on my computer so as to trap *my* *own* data before it gets encrypted by libssl, or after it has been decrypted by libssl.
I have got the Source Code, I'm just not sure quite where to start with it.
Related posts:
2 responses so far ↓
1 KALL // Apr 8, 2008
i try but there is no way or no program to do this
2 A P // Apr 8, 2008
lol i am a hacker and i spend over 2000$ on ssls from different company's …. Godaddy, verisign etc but no luck…. they are just to hard to crack but i still use 256bit for my site not like some others still with old 128bit
Leave a Comment