search

dotpcap / sharppcap

Official repository - Fully managed, cross platform (Windows, Mac, Linux) .NET library for capturing packets
1.34k stars 268 forks source link

Intercept https request/response #31

Closed chiptus closed 5 years ago

chiptus commented 6 years ago

Wireshark and other similar services allow decrypting of https responses by installing a certificate on the browser. Is there a way to do it with SharpPCap?

chmorgan commented 6 years ago

That would be a cool feature. I have some http following code that I've been meaning to dual license so I can release it under gpl for non commercial use but have been hard at work on some other things. This wouldn't get you all the way there, you'd need some way to take apart the ssl communication. No idea how Wireshark does that....

chiptus commented 6 years ago

I'm using burp and mitmproxy, and they let you install a certificate on the browser and then uses it to decrpyt the responses.

What I think you should have is let the user self generate his own certificate, and add it as a configuration option to your service. Sounds possible?

chmorgan commented 6 years ago

That's a good question. I'm sure its possible given that others do it and the source is available.

chmorgan commented 5 years ago

Closing this out. It would be great to have this kind of stuff rolled into sharppcap or a compatible library. I'm working to push out some enhanced functionality for PacketDotNet that might help open the door for others to build upon.