Collaborate Disseminate
AWS recommends pinning their root certificate when implementing SSL pinning. My understanding is that SSL pinning for mobile applications mitigates a situation where an attacker has installed a malicious certificate on the de… Continue reading Why does pinning a CA root certificate not present a security risk?
This question already has an answer here:
Can VPN provider see my data?
2 answers
When communicating with a server using … Continue reading SSL/TLS connections over VPN [duplicate]
I recently Googled a website e.g A.com and found B.com in search result at the top. In reality A.com should be on top as B.com doesn’t have anything in common or related to A.com but Google shows it in search result at top. I… Continue reading One domain using certificate of other domain
I am creating an android application which is able to ping the server for certain information and return them. There are a few methods by which a user can bypass the pinned SSL certificate of an android application by using t… Continue reading Prevent bypassing of SSL Pinning in android application
I am trying to use burpsuite to intercept app traffic.
I’ve configured everything and imported the CA certificate using the mobile browser.
Now, I am able to intercept browser traffic but the apps are not able to connect to t… Continue reading Unable to intercept app traffic using burpsuite [on hold]
Would anyone please guide me how to generate SSL traffic and any basic SSL attack (e.g., Man in the Middle Attack (MITM), POODLE attack) on local machine in order to analyze this traffic in wireshark and launch attack on it…. Continue reading How to generate SSL Traffic and MITM or POODLE Attack on local machine
This question already has an answer here:
Can a VPN Provider MitM my SSL traffic without me noticing?
5 answers
There are… Continue reading How can a network inspect SSL traffic, and how can I secure my data? [duplicate]
I’d like to proxy an Android application with Burp Suite. The application uses certificate pinning via OkHttp3. I solved this by modifying the source code, now the application accepts the certificates generated by Burp Suite’… Continue reading Proxying an Android app protected with certificate sign request with Burp Suite
I encountered this error on Google Chrome on my Windows 10. I solved it by installing the certificate and now it is working fine.
I wonder, how do I know the certificate I have is legit? That is, that it actually comes from … Continue reading How to check Google SSL certificate?
I encountered this error on Google Chrome on my Windows 10. I solved it by installing the certificate and now it is working fine.
I wonder, how do I know the certificate I have is legit? That is, that it actually comes from … Continue reading How to check Google SSL certificate?