search

blessedlex / Skynet-Zuckerberg-Edition

CYBR 4580-8950 IA Capstone Project
0 stars 0 forks source link

decrypt TLS packets in order to view transmission data #19

Closed sashaprice closed 3 years ago

sashaprice commented 3 years ago

Facebook uses HTTPS traffic, meaning that captured packets will be encrypted. Find out how to decrypt captured packets in order to begin working on #17

sashaprice commented 3 years ago

After some research, the easiest way is to add "SSLKEYLOGFILE" to your system environment variables and have it point to a text file. This will populate the text file with session keys which you can then give to Wireshark to automatically decrypt traffic.

sashaprice commented 3 years ago

Source: https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark/