+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Beginner Hacking (https://hackforums.net/forumdisplay.php?fid=4)
+---- Thread: HTTPS in MiTM (/showthread.php?tid=6241498)
HTTPS in MiTM - javierpena - May 12, 2023
I was configuring burp yet again on a fresh VM and this got me thinking about HTTPS certs. How exactly do they work? Can I craft my own cert and "incert" (no pun intended 😁) into a victim browser, so I can decrypt the data I receive when performing MiTM without the need for SSL strip
Honestly I don't really know much about these things and this is just an idea. Can it be done? How to make my own certificate and decrypt data passed through SSL?
I will appreciate any help including resources to read or if anyone has already done it and can speak from experience
Thanks!
RE: HTTPS in MiTM - Its1234 - May 13, 2023
In my opinion, mitm is not that useful because it takes too much effort and it's not worth it in the end. the only thing I can think of that Mitm is good for is when you're on someone else's network and you want to see what websites they always visit
Don't break your head trying to figure out how to do it just focus on something else like DNS poisoning and redirecting and all that
RE: HTTPS in MiTM - javierpena - May 13, 2023
(May 13, 2023 04:56 AM)Its1234 Wrote: In my opinion, mitm is not that useful because it takes too much effort and it's not worth it in the end. the only thing I can think of that Mitm is good for is when you're on someone else's network and you want to see what websites they always visit
Don't break your head trying to figure out how to do it just focus on something else like DNS poisoning and redirecting and all that
Thanks for your input but I am interested in this specific method
RE: HTTPS in MiTM - Dread.Reaper - May 13, 2023
I mean there is always self signed SSL certs....
RE: HTTPS in MiTM - javierpena - May 13, 2023
(May 13, 2023 06:00 AM)Dread.Reaper Wrote: I mean there is always self signed SSL certs....
why all experts always talk in riddles 😆
RE: HTTPS in MiTM - Dread.Reaper - May 13, 2023
(May 13, 2023 06:04 AM)javierpena Wrote: why all experts always talk in riddles 😆
https://stackoverflow.com/questions/21297139/how-do-you-sign-a-certificate-signing-request-with-your-certification-authority
You can sign your own SSL certificates for this purpose. (Keeping in mind it can still cause warnings on some browsers that is not a Certificate authority issued one)
RE: HTTPS in MiTM - javierpena - May 13, 2023
(May 13, 2023 06:07 AM)Dread.Reaper Wrote: https://stackoverflow.com/questions/21297139/how-do-you-sign-a-certificate-signing-request-with-your-certification-authority
You can sign your own SSL certificates for this purpose. (Keeping in mind it can still cause warnings on some browsers that is not a Certificate authority issued one)
Thanks I will check this out ✌
RE: HTTPS in MiTM - Dread.Reaper - May 13, 2023
(May 13, 2023 06:09 AM)javierpena Wrote: Thanks I will check this out ✌
✌
Also...
(May 13, 2023 06:04 AM)javierpena Wrote: why all experts always talk in riddles 😆
I could ask why all newbies are trying to do things with stuff they dont understand. 🙃
You gotta understand how the tech works before you can go messing about with it 😎
RE: HTTPS in MiTM - javierpena - May 13, 2023
(May 13, 2023 06:22 AM)Dread.Reaper Wrote: ✌
Also...
I could ask why all newbies are trying to do things with stuff they dont understand. 🙃
You gotta understand how the tech works before you can go messing about with it 😎
I am a wild card more commonly known as a joker 😁