Hack Security Pro.pdf - Index of

B) SSL
The SSL protocol functions with the sending of a public key certificate, which will be used to encrypt
the communication in a secure canal, following the same methodology as SSH. The attack is therefore
in theory quite similar. The pirate will emulate on a relay machine, through which the victim passes, an
SSL server, who de-encrypts and re-encrypts the communication to forward it to the final server. The
Ettercap utility, that we have already studied, knows how to implement this type of attack without any
particular option.
Another method is to force the user to pass through a proxy server that also implements an SSL
server (SSLProxy : http://www.obdev.at/products/ssl-proxy/). For conventional HTTP requests we will
use Achilles on Windows.
This utility is a proxy HTTP server, which can log the communications it transits, and which can modify
the contents of requests or of answers destined to the client or the web server. Simply specify a port
that will be listened to and activate the options: Intercept mode ON, Intercept Client Data, Intercept
Server Data and ignore .jpg/.gif.
In the main window, you can modify the contents of the requests or of the web pages sent. Be careful
when you forward the communication between the two parties in this mode, as you will have to
validate each request or page with the Send button.
Security
SSL certificates are known sites that are generally referenced in databases automatically
consulted by web navigators, in order to check that the certificate sent back is an authentic one.
When it is a fake one, a warning is sent back.
The Hackademy DMP -97/209- SYSDREAM