SSLsplit is a tool that performs man-in-the-middle attacks against SSL/TLS encrypted network connections for network forensics and penetration testing. It terminates SSL/TLS and initiates a new connection to the original destination, logging all data transmitted. It supports plain TCP and SSL, HTTP and HTTPS, and IPv4 and IPv6. For SSL and HTTPS, it generates and signs forged X509v3 certificates on-the-fly using the original certificate's subject DN and subjectAltName extension. It supports Server Name Indication, RSA, DSA, and ECDSA keys, and DHE and ECDHE cipher suites. It can also use existing certificates if the private key is available.
|Tags||Security Cryptography Network Forensics SSL TLS|
|Operating Systems||Linux BSD FreeBSD OpenBSD Mac OS X|
|Implementation||C OpenSSL libevent check GNU make|
Release Notes: This maintenance release fixes a number of bugs, including daemon mode issues related to threading and a problem in the Linux netfilter support. It adds support for 2048- and 4096-bit Diffie-Hellman.
Release Notes: This release adds improvements to OCSP denial and bugfixes.