PolarSSL - An Open Source SSL

The importance of secure socket layer is not a hidden truth on the Internet, SSL or secure socket layer provides an extra level of security for the confidential information. Now a days every important websites like E-commerce websites including online transactions are using SSL for user information security. If you dont have any idea about SSL than you can learn secure socket layer from our previous discussion.

What is PolarSSL

There are so many SSL services available on the Internet, but what makes PolarSSL a little different from others? The answer is simple and that PolarSSL is a light-weight open source cryptographic and SSL/TLS library written in C. PolarSSL is licensed according to the dual licensing model, making it available under the open source GPL version 2 as well as a commercial license.

It is easy to develop on an application that provides cryptographic facility between the user and the server. PolarSSL is written with embedded systems in mind and has been ported to a large number of environments, including Windows (32 and 64 bit), Linux, UNIXes, BSD's, OpenWRT, iPhone(iOS), XBox, Android and more. Chipsets supported includeIntel, ARM, PowerPC, MIPS and Motorola 68000.

Features

• Small memory footprint
• Clean and simple API for integration
• Loose coupling of cryptographic code.
• Symmetric encryption algorithms: AES, Triple-DES, DES, ARC4, Camellia, XTEA
• Hash algorithms: MD2, MD4, MD5, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512
• HAVEGE random number generator
• RSA with PKCS#1 v1.5 and PKCS#1 v2.1 padding
• SSL version 3, TLS version 1.0 and TLS version 1.1 client support
• X.509 certificate and CRL reading from memory or disk in PEM and DER formats
• Support for PKCS#11 interfacing, using the OpenSC PKCS#11 helper library
• Over 1600 validation, regression and code coverage tests
• Example applications
  

Download

However SSL provides some extra security and protection but as a user you must care about your information because there are different techniques available to break and crack SSL. An attacker might use backtrack like backtrack 5 to crack SSL.

Note: If you want to learn more about Linux and Windows based Penetration testing, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Other Readings

• Wireshark 1.6.0 released (net-security.org)
• What really breaks SSL? (net-security.org)
• SSL Secured Online Invoicing for Everyone with CurdBee (prweb.com)
• SSL Certificates May Offer False Sense Of Trust (informationweek.com)

Read more

by Malik korrich ~ jeudi 11 août 2011 0 commentaires

Crack SSL Using SSLStrip With BackTrack5

Well this is the tutorial based article, so you must know about SSL (secure socket layer) and something about Backtrack5 because we are using backtrack5 for this tutorial, if you are using some old version like backtrack4 or if you are using some other Linux so you must be sure to install all the dependencies that being used in this tutorial.

 

Secure socket layer or SSL used to established a secure and encrypt connection between user and the server and we would like to break this secure connection so the sniffing will be occur successfully. Click here to learn more about SSL.

To crack SSL protection we launch man in the middle attack, so doing this we need some tools and the requirement list is

• Linux (Backtrack)
• Arpspoof
• IP Tables
• SSL Strip
• Netstat

1. Linux OS 2. Arpspoof 3. IPTables 4. SSLStrip 5. NetStat

Read more at: http://vishnuvalentino.com/computer/break-ssl-protection-using-sslstrip-and-backtrack-5/
Copyright © Vishnu Valentin

Now start the game first of all, make your Linux box to start port forwarding use this command.

echo '1' > /proc/sys/net/ipv4/ip_forward

Read more at: http://vishnuvalentino.com/computer/break-ssl-protection-using-sslstrip-and-backtrack-5/
Copyright © Vishnu Valentino

echo '1' > /proc/sys/net/ipv4/ip_forward

After this your Linux box will able to forward all the packets, now you must know about your gateway IP, to know about your gateway use the command

netstat -nr 

Now use ARPSpoof to perform attack

arpspoof -i eth0 192.168.8.8 

Here eth0 represents the network interface card if you are using wireless link than it may be wlan0, while 192.168.8.8 is the default gateway in your case may be it different normally people are using 192.168.1.1 or 10.0.0.1

Its time to use SSL Strip, download and install SSL strip from the official website shared before, after installation we are using SSL strip, make your firewall to redirect all the traffic from port 80 to port 8080 so use the command

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 8080

 After this make all the traffic to go from ARPspoof tables 

echo '1' > /proc/sys/net/ipv4/ip_forward

arpspoof -i eth0 192.168.8.8 

If your arpspoof start capturing traffic means everything is fine and the time is to use SSL strip use the command below

sslstrip -l 8080

After that your browser address bar does not use https it only use http and the sniffing is so easy.

Special Thanks to: 

Break SSL protection Using SSLStrip and Backtrack 5

Note: If you enjoyed this post, you might want to subscribe our RSS feed and Email Subscription  or become our Facebook fan! You will get all the latest updates at both the places.

Read more

by Malik korrich ~ vendredi 10 juin 2011 0 commentaires