3 ms·

Sniffing encrypted traffic can also be done with Fiddler (admin account required) and NetRipper (no admin requirement): https://tinyapps.org/blog/windows/201508

by miles 10y ago

Sniffing encrypted traffic can also be done with Fiddler (admin account required) and NetRipper (no admin requirement): https://tinyapps.org/blog/windows/201508150700_sniffing_encrypted_traffic.html https://tinyapps.org/blog/windows/201508150700_sniffing_encr... On a related note, to extract webmail passwords and more from memory, check out mimikittenz: https://github.com/putterpanda/mimikittenz https://github.com/putterpanda/mimikittenz . Basic usage: https://tinyapps.org/blog/windows/201607080700_extract_passwords_from_memory.html https://tinyapps.org/blog/windows/201607080700_extract_passw...

generj 10y ago
CHARLES also works really well and in my opinion has a better UI than Fiddler. It can also be used to capture encrypted traffic on another device.
- jsingleton 10y ago
  Worth pointing out that Charles isn't free [0], unlike Fiddler. It used to be that on Mac/Linux you didn't have many choices but there is now a Beta of Fiddler for Mac and an Alpha for Linux (using Mono) [1]. [0]: https://www.charlesproxy.com https://www.charlesproxy.com [1]: https://www.telerik.com/download/fiddler https://www.telerik.com/download/fiddler
j_s 10y ago
Thanks for the pointer to NetRipper; tinyapps.org is the best! Fiddler MITM's creating a self-signed cert for each domain, which fails on apps that do cert pinning. I didn't get far enough to try but it also sounded like it didn't support smart cards for client certs in this mode either, asking for the private key in a file. Just turning on the 'open dev tools for new windows' setting in Chrome is often enough to get what I need easily.
- miles 10y ago
  "tinyapps.org is the best" Thanks so much for the kind words, j_s. I'm afraid (or perhaps the word I'm looking for is "glad" ;-) that the Internet has passed tinyapps.org on by. After its fleeting 15 seconds of fame back in 2001 (thanks to a Slashdotting and tiny blurb in Wired), the site has mainly served as an irregular tech blog lo these many years. Sorry that Fiddler did not prove efficacious. Thank you for the Chrome tip!
jsingleton 10y ago
Fiddler is great. Hadn't heard of NetRipper. Will take a look, thanks. Also worth considering is Microsoft Message Analyzer, which used to be Network Monitor (NetMon). https://blogs.technet.microsoft.com/MessageAnalyzer/ https://blogs.technet.microsoft.com/MessageAnalyzer/ Edit: I should add that this isn't an endorsement, just another option. I only included MMA as a side-note in my recent book. I focussed on Wireshark and Fiddler to keep things simple.

by miles 10y ago

generj 10y ago

CHARLES also works really well and in my opinion has a better UI than Fiddler. It can also be used to capture encrypted traffic on another device.

jsingleton 10y ago
Worth pointing out that Charles isn't free [0], unlike Fiddler. It used to be that on Mac/Linux you didn't have many choices but there is now a Beta of Fiddler for Mac and an Alpha for Linux (using Mono) [1]. [0]: https://www.charlesproxy.com https://www.charlesproxy.com [1]: https://www.telerik.com/download/fiddler https://www.telerik.com/download/fiddler

j_s 10y ago

Thanks for the pointer to NetRipper; tinyapps.org is the best! Fiddler MITM's creating a self-signed cert for each domain, which fails on apps that do cert pinning. I didn't get far enough to try but it also sounded like it didn't support smart cards for client certs in this mode either, asking for the private key in a file. Just turning on the 'open dev tools for new windows' setting in Chrome is often enough to get what I need easily.

miles 10y ago
"tinyapps.org is the best" Thanks so much for the kind words, j_s. I'm afraid (or perhaps the word I'm looking for is "glad" ;-) that the Internet has passed tinyapps.org on by. After its fleeting 15 seconds of fame back in 2001 (thanks to a Slashdotting and tiny blurb in Wired), the site has mainly served as an irregular tech blog lo these many years. Sorry that Fiddler did not prove efficacious. Thank you for the Chrome tip!

jsingleton 10y ago

Fiddler is great. Hadn't heard of NetRipper. Will take a look, thanks. Also worth considering is Microsoft Message Analyzer, which used to be Network Monitor (NetMon). https://blogs.technet.microsoft.com/MessageAnalyzer/ https://blogs.technet.microsoft.com/MessageAnalyzer/ Edit: I should add that this isn't an endorsement, just another option. I only included MMA as a side-note in my recent book. I focussed on Wireshark and Fiddler to keep things simple.