Quotidien Shaarli

Tous les liens d'un jour sur une page.

May 28, 2016

Errata Security: Exploiting the Superfish certificate

In this blog post, I described how I used that certificate in order to pwn victims using a rogue WiFi hotspot.

voir en annexe liste de chipsets wifi plus actuels

SSLsplit - transparent SSL/TLS interception (SSLsplit)

SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections.

Debian: apt-get install sslsplit

tutorial https://blog.heckel.xyz/2013/08/04/use-sslsplit-to-transparently-sniff-tls-ssl-connections/