2 ms·
Well, that's horrifying to see exist as a sysadmin (though I am sure plenty of blackhats have such tools).
by ck2 12y ago
Well, that's horrifying to see exist as a sysadmin (though I am sure plenty of blackhats have such tools).
- conductor 12y agoThe attacker must install a CA certificate on the users' computers so he can strip/split their SSL/TLS sessions. Frankly, that's the sysadmins who are using this type of tools the most for monitoring the browsing habits of the employees.
- higherpurpose 12y agoNo wonder NSA puts a greater deal of focus on hacking sysadmins. Once those individuals are hacked, the data floodgates open.
- eps 12y agoEvery second antivirus appliance, "threat management" devices and other traffic scanning boxes had SSL splicing for years. I worked on such splicer for a large telecom equipment manufacturer back in 2005 and it wasn't exactly a blackhat tech even then.
- Nursie 12y agoReally? I wrote one of these a while ago, using a fake DNS rather than NAT. It's pretty trivial. Ths trick is getting the clients to accept your CA cert.