jetlib.sec » Tags » interactive-traffic

sslsnoop dumps live session keys from openssh and can also decrypt the traffic on the fly. Works if scapy doesn’t drop packets. using pcap instead of SOCK_RAW helps a lot now. Works better on interactive traffic with no traffic at the time of the ptrace. It follows the flow, after that. Dumps one file by [...]

Read the full post at darknet.org.uk

Tags:  traffic sslsnoop session read interactive-traffic session-keys drop-packets cryptography