Ssl MITM mit stunnel

Installation

• apt install stunnel

Vorbereitung

• FQDN="www.xinux.de"
• cd /etc/stunnel

Checken der Zertifikate

• ls *.{crt,key}

ca.crt  www.xinux.de.crt  www.xinux.de.key

Konfiguration

• cat<<HERE >stunnel.conf

debug = 7
options = NO_SSLv2
output = /var/log/stunnel.log

[to-server]
client = yes
accept = 127.0.0.1:80
connect = $FQDN:443
CAPath = /etc/ssl/certs/
verify = 2

[from-client]
accept  = 0.0.0.0:443
connect = 127.0.0.1:80
cert = /etc/stunnel/$FQDN.crt
key = /etc/stunnel/$FQDN.key
CAfile = /etc/stunnel/ca.crt

• HERE

Restart

• systemctl restart stunnel4.service

Sniffen

• ngrep -d lo -s 1500 -l -i '.' port 80
• tcpdump -i lo port 80 -w sniff.cap