SSL / https decrypting on the fly ?

Sethioz · **Posted:** 17 Nov 2010 02:12

i have talked about it with Luigi a bit, but i tought its best to post it up in public, there might be ppl who knows this already.

i have tried to decrypt SSL without success, any ideas ?
Luigi told me to use stcppipe, but on some reason it doesnt work for me.
i did this:
stcppipe -d "C:/blahdoh/" -S support.steampowered.com 443 443
and then visited 127.0.0.1, but nothing happend. stcppipe did not recieve anything. i also tried https://127.0.01 and using port too, like 127.0.0.1:443 (all possible combinations), but nothing.

i have googled a lot and seen those threads about WireShark and stuff, but it makes no sense. you cant really get the RSA PRIVATE KEY, can you ?
i also found something called Komodia, which suppouse to decrypt any and all SSL connections on the fly, but its not free and theres no cracks out there + their free SSL sniffer doenst work either.

what i need, is to see SSL traffic in plain text. lets say i visit support.steampowered.com and im able to see all the data.

dscoduc · **Joined:** 07 Dec 2010 10:38 **Posts:** 5

Have you tried using Fiddler? That allows you to see the SSL traffic...

Sethioz · **Posted:** 08 Dec 2010 21:30

nice one. its weird that fiddler never showed up in any of the google searches what i tried. i searched for weeks (not 24/7 obviously), but found nothing like it.

however i have problem with it. i googled, but they make no sense as usual, leaving out details, which are important.

i get this

Quote:

creation of the interception certificate failed
makecert.exe returned -1073741515

and then after i click ok i get this

Quote:

creation of the root certificate was not successful

after this:

Quote:

certificate generation failed for www.address.here

what i found on google, they say that its caused from previous installation blabla, but i never had it before.
also some ppl saying it happens on xp sp3 and has something to do with .NET framework.
oh well ... i start messing with it.

Sethioz · **Posted:** 11 Dec 2010 15:33

ignore that, this issue occurs only on my primary OS.

however this will not be able to decrypt applications like pokerstars, cuz they dont accept those certificates. certificate have to be real.
i also found "charles", but i think it has same issues.

Luigi Auriemma

SSL / https decrypting on the fly ?