Wireshark-users: Re: [Wireshark-users] Decrypting SSL with Wireshark

From: "St. Onge,Adam" <ASTONGE@xxxxxxxxxxxxx>
Date: Mon, 18 Jan 2010 13:59:21 -0500

The wiki has good coverage on this (http://wiki.wireshark.org/SSL) but not really applicable to Penetration testing unless you have already compromised the web server and got the Private key.

 


From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of sieger007@xxxxxxxxx
Sent: Monday, January 18, 2010 12:29 PM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] Decrypting SSL with Wireshark

 

Hi Folks
I am  interesting in using Wireshark for Penetration Testing work. SSL has always intrigued me. I heard it is poss to decrypt traffic using WS.
Wireshark documentation. Has more stuff on it but it all sounds so Greeky. I can't follow squat of that .
Can SOMEONE PLEASE point to some video tutorial or gimme a plain and simple tutorial how this is done.
What'd be the success rate . Did anyone have luck doing this with  some 9/10 success . Please help
Thanks
S

==============================================================================
This communication, including attachments, is confidential, may be subject to legal privileges, and is intended for the sole use of the addressee. Any use, duplication, disclosure or dissemination of this communication, other than by the addressee, is prohibited. If you have received this communication in error, please notify the sender immediately and delete or destroy this communication and all copies.