SSLsplit [Linux]

SLsplit — инструмент для атак «человек посередине» против зашифрованных сетевых соединений SSL/TLS. SSLsplit предназначен, для использования специалистами по судебной экспертизы и пентестерами для тестирования на возможность проникновения, ну и конечно же это прекрасный инструмент для подбора паролей к беспроводным сетям который использует технику Man-In-The-Middle.
Программа поддерживает TCP, SSL, HTTP и HTTPS соединения, через IPv4 и IPv6.

Инструкция:

% sslsplit -h
Usage: sslsplit [options…] [proxyspecs…] -c pemfile use CA cert (and key) from pemfile to sign forged certs
-k pemfile use CA key (and cert) from pemfile to sign forged certs
-C pemfile use CA chain from pemfile (intermediate and root CA certs)
-K pemfile use key from pemfile for leaf certs (default: generate)
-t certdir use cert+chain+key PEM files from certdir to target all sites
matching the common names (non-matching: generate if CA)
-O deny all OCSP requests on all proxyspecs
-P passthrough SSL connections if they cannot be split because of
client cert auth or no matching cert and no CA (default: drop)
-g pemfile use DH group params from pemfile (default: keyfiles or auto)
-G curve use ECDH named curve (default: secp160r2 for non-RSA leafkey)
-Z disable SSL/TLS compression on all connections
-s ciphers use the given OpenSSL cipher suite spec (default: ALL:-aNULL)
-e engine specify default NAT engine to use (default: ipfw)
-E list available NAT engines and exit
-u user drop privileges to user (default if run as root: nobody)
-j jaildir chroot() to jaildir (default if run as root: /var/empty)
-p pidfile write pid to pidfile (default: no pid file)
-l logfile connect log: log one line summary per connection to logfile
-L logfile content log: full data to file or named pipe (excludes -S)
-S logdir content log: full data to separate files in dir (excludes -L)
-d daemon mode: run in background, log error messages to syslog
-D debug mode: run in foreground, log debug messages on stderr
-V print version information and exit
-h print usage information and exit
proxyspec = type listenaddr+port [natengine|targetaddr+port|»sni»+port] e.g. http 0.0.0.0 8080 www.roe.ch 80 # http/4; static hostname dst
https ::1 8443 2001:db8::1 443 # https/6; static address dst
https 127.0.0.1 9443 sni 443 # https/4; SNI DNS lookups
tcp 127.0.0.1 10025 # tcp/4; default NAT engine
ssl 2001:db8::2 9999 pf # ssl/6; NAT engine ‘pf’
Example:
sslsplit -k ca.key -c ca.pem -P https 127.0.0.1 8443 https ::1 8443

Язык интерфейса: English
Пароль на архив: Нет

Скачать бесплатно
SSLsplit