Re: Decrypting SSL with Wireshark

["Sake Blok" <sake () euronet nl>]

If there was, SSL would not do a good job being a secure protocol...
  ----- Original Message ----- 
  From: sieger007 () gmail com 
  To: Community support list for Wireshark 
  Sent: Monday, January 18, 2010 9:11 PM
  Subject: Re: [Wireshark-users] Decrypting SSL with Wireshark


  Hi Adam 
  Thanks . Now is there a way to 'extract' a Pvt key from a cert file or that is confidential e.g. google, hotmail. 
etc.Is there any OTHER viable solution to sniff SSL traffic without creating a fake certificate with warnings
  Thanks
  S


  On Mon, Jan 18, 2010 at 10:59 AM, St. Onge,Adam <ASTONGE () travelers com> wrote:

    The wiki has good coverage on this (http://wiki.wireshark.org/SSL) but not really applicable to Penetration testing 
unless you have already compromised the web server and got the Private key.




----------------------------------------------------------------------------

    From: wireshark-users-bounces () wireshark org [mailto:wireshark-users-bounces () wireshark org] On Behalf Of 
sieger007 () gmail com
    Sent: Monday, January 18, 2010 12:29 PM
    To: wireshark-users () wireshark org
    Subject: [Wireshark-users] Decrypting SSL with Wireshark



    Hi Folks
    I am  interesting in using Wireshark for Penetration Testing work. SSL has always intrigued me. I heard it is poss 
to decrypt traffic using WS. 
    Wireshark documentation. Has more stuff on it but it all sounds so Greeky. I can't follow squat of that .
    Can SOMEONE PLEASE point to some video tutorial or gimme a plain and simple tutorial how this is done. 
    What'd be the success rate . Did anyone have luck doing this with  some 9/10 success . Please help
    Thanks
    S


==============================================================================
This communication, including attachments, is confidential, may be subject to legal privileges, and is intended for the 
sole use of the addressee. Any use, duplication, disclosure or dissemination of this communication, other than by the 
addressee, is prohibited. If you have received this communication in error, please notify the sender immediately and 
delete or destroy this communication and all copies.

    ___________________________________________________________________________
    Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
    Archives:    http://www.wireshark.org/lists/wireshark-users
    Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
                mailto:wireshark-users-request () wireshark org?subject=unsubscribe





------------------------------------------------------------------------------


  ___________________________________________________________________________
  Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
  Archives:    http://www.wireshark.org/lists/wireshark-users
  Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
               mailto:wireshark-users-request () wireshark org?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe