Added option to dump TLS (pre-)master keys for e.g. decrypting PCAPs …

jrmdev / mitm_relay

Hackish way to intercept and modify non-HTTP protocols through Burp & others.

Apache License 2.0

582 stars 97 forks source link

Added option to dump TLS (pre-)master keys for e.g. decrypting PCAPs … #13

Closed HomeSen closed 4 years ago

HomeSen commented 4 years ago

…in Wireshark (useful for raw TCP and UDP protocols)

During an engagement I had to intercept TLS-encrypted MQTT. And since manually decoding the raw MQTT binary data stream is quite tedious, I added the an option to dump SSL/TLS (pre-)master keys (using the sslkeylog Python module) in order to decrypt the live captured traffic in Wireshark.