Ethereal-users: Re: [Ethereal-users] Where can I find IE debug DLL, to dump HTTPS requests?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Tony Lee <tony.p.lee@xxxxxxxxx>
Date: Thu, 23 Sep 2004 02:38:30 -0700
On Wed, 22 Sep 2004 20:38:42 -0400, Hansang Bae <hbae@xxxxxxxxxx> wrote:
> On 07:05 AM 9/17/2004, nevez@xxxxxxxx wrote:
> >I read in a previous post that a debug version of Internet Explorer dll can show the HTTP requests being sent by IE over a SSL connection. Any info about where to find it?
> >I'm developing web apps in Java, and that would be very useful...
> 
> It's in the resource kit if I remember.  I just punted to our MS support person and asked for the checked (debug) version.  They are tied to the version of wininet.dll that's installed on the system.
> 
> hsb
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 

You don't need the debug version. 

You can write an ActiveX .dll be inserted into IE and hook all the URL
(include https)
request/response before and after the user see it.  I saw some  
spywares doing it that way nowaday.    Useful debug feature sometime,
big security hole.   That's why I don't use IE anymore.

BTW, this is also how the page ranking part of google toolbar work.

I have not seen any firewall product that can detect or block this
kind of attack.
Not zone alarm or kerio.  I laugh when a Banker/stock broker using windows IE 
and tell me 128 bits HTTPS is secured.


-- 
-Tony