colorblindjimbo
In Runtime
- Messages
- 195
Hello, let me give a little bit of a background on myself.
I am a 20 year old college student, and I am majoring in Information Security. I have received a project from my teacher as a 2 credit internship to do a presentation at a security conference on whatever topic I feel like (pertaining to INFOSEC).
I have decided to do it on Proxy Servers, and how they can be used maliciously to steal your personal information.
I have already setup a proxy server using CCProxy, and was able to sniff out quite a bit of information (all unencrypted http transmissions including usernames and passwords, instant messaging, and e-mails).
However, when using HTTPS the passwords show up as hashes, which is what I expected. I talked to my teacher, and she told me that I should look into SSL Proxies, as with one of these I may be able to everything from every transmission through the proxy server.
I would like to know how to go about setting up an SSL Proxy, any information would be very helpful.
Thank you.
I am a 20 year old college student, and I am majoring in Information Security. I have received a project from my teacher as a 2 credit internship to do a presentation at a security conference on whatever topic I feel like (pertaining to INFOSEC).
I have decided to do it on Proxy Servers, and how they can be used maliciously to steal your personal information.
I have already setup a proxy server using CCProxy, and was able to sniff out quite a bit of information (all unencrypted http transmissions including usernames and passwords, instant messaging, and e-mails).
However, when using HTTPS the passwords show up as hashes, which is what I expected. I talked to my teacher, and she told me that I should look into SSL Proxies, as with one of these I may be able to everything from every transmission through the proxy server.
I would like to know how to go about setting up an SSL Proxy, any information would be very helpful.
Thank you.
