Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add openssl_altchainsforgery_mitm_proxy.rb #5735

Merged
merged 2 commits into from
Jul 24, 2015
Merged

Add openssl_altchainsforgery_mitm_proxy.rb #5735

merged 2 commits into from
Jul 24, 2015

Commits on Jul 16, 2015

  1. Add openssl_altchainsforgery_mitm_proxy.rb 

    This module exploits a logic error in OpenSSL by impersonating the
server and sending a specially-crafted chain of certificates, resulting
in certain checks on untrusted certificates to be bypassed on the
client, allowing it to use a valid leaf certificate as a CA certificate
to sign a fake certificate. The SSL/TLS session is then proxied to the
server allowing the session to continue normally and application data
transmitted between the peers to be saved. This module requires an
active man-in-the-middle attack.
    @rcvalle
    rcvalle committed Jul 16, 2015
    Configuration menu
    Copy the full SHA
    5d6c15a View commit details
    Browse the repository at this point in the history

  2. Add missing info

    @rcvalle
    rcvalle committed Jul 16, 2015
    Configuration menu
    Copy the full SHA
    449c751 View commit details
    Browse the repository at this point in the history