Collaborate Disseminate
With regards to IPS, I am not completely across how they are supposed to terminate or decrypt encrypted traffic? It makes absolutely sense to deploy them inline, but how is traffic supposed to be broken up so it can be inspec… Continue reading How does IPS terminate/decrypt encrypted traffic?
Is it normal to have Session ID in the first Client Hello, and then the server picks it up and accepts the same Session ID and uses it in all further TLS traffic. That is the “Client or Browser” tells what Session ID to use and “Server” ac… Continue reading Session ID in the very First Client Hello
Sometimes I see news articles saying that someone was suspected of a crime so the police got their search history and found various google search terms etc.
What are the possible ways they can do that?
I understand that if they get physi… Continue reading How can police get someone’s search history?
I’m a newbie to android pen testing and started off with an application.
The app uses HTTPS and works fine without configuring any proxy.
When a proxy like a burp suite is configured, the app responds with an error message. However, I’m … Continue reading Android application interception issue
I am testing a C# web API hosted on a remote server, and I am monitoring HTTPS traffic using Fiddler.
What confuses me is that via Fiddler I can see all of the POST payload, headers and host URL addresses for both the reques… Continue reading How come I can see a full HTTPS requests via Fiddler?
So we are working on making a product of one of our clients common criteria compliant. We are using tls-cc-tools for running FCS_TLSC tests but we are unable to run FCS_TLSS_EXT.1.1 test 5. Please tell how can we run those t… Continue reading How to run FCS_TLSS tests of for common criteria evaluation?
I am trying to intercept the https request, but I getting this error while searching anything in URL.it’s hitting my burp, but I can’t get any response after clicking forward button,it comes with this error. I did all cofiguration.
Coul… Continue reading Failed to connect to www.google.co.in:443 error in burp suite?
The latest research seems to indicate that TLS 1.3 completely breaks the MITM/proxy model of many current security tools.
I don’t fully understand how it does that and if there are ways around this. Are SSL/TLS proxy vendors going to face … Continue reading How does TLS 1.3 break inspection?
There is a lot of confusion around this on here, so I am making this post to be sure to understand it correctly. My school uses Aruba networks wifi, and after I type my Active Directory username and password (RADIUS authentication), it tel… Continue reading My school wifi asks to ‘trust’ a certificate on iPhones. Does this allow them to view SSL traffic?
How can I identify precisely the exact number of bytes the ClientHello and ServerHello in a TLS traffic needs? this is for traffic analysis purpose to capture the TLS bytes of interest (client hello and server hello only).