3 ms·
Why not get the symmetric key from process memory and then decrypt the recorded or live traffic with it ? https://www.youtube.com/watch?v=Vj_FjO6TqXg https://ww
by xuhu 5y ago
Why not get the symmetric key from process memory and then decrypt the recorded or live traffic with it ? https://www.youtube.com/watch?v=Vj_FjO6TqXg https://www.youtube.com/watch?v=Vj_FjO6TqXg
- strich 5y agoIs that even open source anywhere? Seems a PoC was never released.
- jonluca 5y agoThat's the TLS key. It's trivial to read the "plain text" contents of the HTTP request - this is for when the contents are actually encrypted at Layer 7, the application layer, not the transport layer. I did write up how to do it for Blind, though, here https://blog.jonlu.ca/posts/decrypting-blind https://blog.jonlu.ca/posts/decrypting-blind