Meditation, The Art of Exploitation

Thinking? At last I have discovered it--thought; this alone is inseparable from me. I am, I exist--that is certain. But for how long? For as long as I am thinking. For it could be, that were I totally to cease from thinking, I should totally cease to exist....I am, then, in the strict sense only a thing that thinks.

Tuesday, December 12, 2006

Use ssldump to decrypt/view SSL/TLS encrypted network packets

With widespread use of SSL/TLS encryption of network traffic, tcpdump/ethereal often are not as useful as they used to be. SSLDUMP is a tool designed to decrypt and display encrypted network traffic. First obtain the private key used during the communication, capture a packet using tcpdump or do a live session (if host computer is fast):

ssldump -k priv_key -r /scratch/sslpkt2 -i eth0 -d