Hack Forums
What could someone do with my SSL private key? - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Webmasters (https://hackforums.net/forumdisplay.php?fid=141)
+---- Forum: Hosting and Web Servers (https://hackforums.net/forumdisplay.php?fid=143)
+---- Thread: What could someone do with my SSL private key? (/showthread.php?tid=5202199)



What could someone do with my SSL private key? - Orgy - Mar 13, 2016

Say for example my site was ketzen.co.uk

and my SSL private key was
Code
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

what could anyone actually do?

;)


* - +Haze - Mar 13, 2016

Why you being mean Orgy? Why :(


* - Orgy - Mar 13, 2016

(Mar 13, 2016 12:54 PM)+Haze Wrote:  Why you being mean Orgy? Why :(

are you implying that this isn't my ssl cert's private key and instead some scammer's?


* - minimalist - Mar 13, 2016

I'm not sure, but I guess we'll wait and see.


* - +Haze - Mar 13, 2016

(Mar 13, 2016 12:55 PM)Orgy Wrote:  are you implying that this isn't my ssl cert's private key and instead some scammer's?

no offcourse not, obviously it's your website, obviously..


* - exploit.c - Mar 13, 2016

this made my day, lmfao. top keks


* - Pillows - Mar 13, 2016

Create your own SSL cert for the website. Somehow do a MITM attack and get session info.


* - bοxxy - Mar 13, 2016

Thank you Orgy for making my day.


* - Orgy - Mar 13, 2016

(Mar 13, 2016 12:58 PM)Pillows Wrote:  Create your own SSL cert for the website. Somehow do a MITM attack and get session info.

right but say that i maybe only get like 20 unique visitors a day


* - MathiasHansen - Mar 13, 2016

Oh how I do love you Orgy


* - Verizur - Mar 13, 2016

(Mar 13, 2016 12:55 PM)Orgy Wrote:  are you implying that this isn't my ssl cert's private key and instead some scammer's?

I may be wrong but isn't it against the rules to call someone a scammer without a link to a valid scam report?


* - Orgy - Mar 13, 2016

(Mar 13, 2016 01:54 PM)Verizur Wrote:  I may be wrong but isn't it against the rules to call someone a scammer without a link to a valid scam report?

only in reputation

We recommend you take the time to read the HF Help Documents section. The answer to your questions should be contained in there.


* - Jоey - Mar 13, 2016

these are some nice memes


* - Verizur - Mar 13, 2016

(Mar 13, 2016 01:54 PM)Orgy Wrote:  only in reputation

We recommend you take the time to read the HF Help Documents section. The answer to your questions should be contained in there.

Are you 100% sure? Because it doesn't sound logical at all.🤫

Oh, before you waste your time; you already negged me.


* - Orgy - Mar 13, 2016

(Mar 13, 2016 01:58 PM)Verizur Wrote:  Are you 100% sure? Because it doesn't sound logical at all.🤫

Oh, before you waste your time; you already negged me.

If you're unsure, We recommend you take the time to read the HF Help Documents section. The answer to your questions should be contained in there.