kmille / PlainSSL Public

Notifications You must be signed in to change notification settings
Fork 1
Star 15

Hooking calls to libssl (openssl) to decrypt ssl traffic

15 stars 1 fork Branches Tags Activity

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 4 Commits
frida		frida
gdb		gdb
ld_preload		ld_preload
.gitignore		.gitignore
README.md		README.md
sslkeylog.c		sslkeylog.c
test.py		test.py

Repository files navigation

generic way to look into ssl traffic (hooking libssl library calls and dumping the key)

credits: https://security.stackexchange.com/questions/80158/extract-pre-master-keys-from-an-openssl-application

the LD_PRELOAD way

How to

cc sslkeylog.c -shared -o libsslkeylog.so -fPIC -ldl
sudo tcpdump -i any port 443 -w out
SSLKEYLOGFILE=premaster.txt LD_PRELOAD=./libsslkeylog.so curl https://heise.de
wireshark -o ssl.keylog_file:premaster.txt out

About

Hooking calls to libssl (openssl) to decrypt ssl traffic

linux debugging openssl ld-preload itsec

Report repository

Releases

No releases published

Packages

No packages published

Languages