I would like to know what DLL function deals with the Https encryption so i can hook it.
I used to hook the send() function from ws2_32.dll and filter data, but with and Https connexion data are encrypted, then i need to hook the encrypting function. Where is it? What is name?
Generally things that encrypt data are intending to prevent you from seeing what it is. Most of us aren't inclined to help anyone bypass such measures without more of an explanation.
Generally things that encrypt data are intending to prevent you from seeing what it is. Most of us aren't inclined to help anyone bypass such measures without more of an explanation.
I yet explained what i was trying to do twice....
I need to make an appli which replace a given word by another one.
I used to hook the send() function and it was working great, but i recently noticied that it does not work when it comes to Https.
where is the evil in me hooking a crypting Https function on my computer ??
TBH, there's nothing "wrong" in the question, getting to a point where you could even get code to execute hooking already means you've managed to get into controlling every aspect of the machine.
If you'ld done a little bit of work, you would have figured out on your own that what you need is CAPI or the Crypto API, or in the case of Vista and later CNG (CAPI next generation).
What you ask isn't going to work however. The crypto uses a PRK. And you don't have the decryption key.
Cant see how you can allow yourself to take part in a discussion to call someone a malicious or a robber
Even if you have nothing but good intentions keep in mind that this site is public. If a solution to your issue is posted it's also usable for all and everyone with malicious intents.
Posting some pissed off comments won't do you any good either, this site is populated with grown up peoples that actually do get a good night's sleep even though some stranger on the net post bad stuff.
Debugging is twice as hard as writing the code in the first place.
Therefore, if you write the code as cleverly as possible, you are, by
definition, not smart enough to debug it.
- Brian W. Kernighan
Even if you have nothing but good intentions keep in mind that this site is public. If a solution to your issue is posted it's also usable for all and everyone with malicious intents.
Posting some pissed off comments won't do you any good either, this site is populated with grown up peoples that actually do get a good night's sleep even though some stranger on the net post bad stuff.
You should keep your selective and sententious moraling "stuff" to those not so grown up peoples like Chris_F who come into a topic to assault original poster, calling them a thief without any good raison. Once you do that, you can go to bed.
Last edited by Usopp; December 23rd, 2010 at 02:04 PM.
TBH, there's nothing "wrong" in the question, getting to a point where you could even get code to execute hooking already means you've managed to get into controlling every aspect of the machine.
If you'ld done a little bit of work, you would have figured out on your own that what you need is CAPI or the Crypto API, or in the case of Vista and later CNG (CAPI next generation).
What you ask isn't going to work however. The crypto uses a PRK. And you don't have the decryption key.
I'am not about to decrypt, but to hook the encrypting function, and then let the encrypting function do its job.
like Chris_F who come into a topic to assault original poster, calling them a thief
Now you're putting words in my mouth. If that's how you want to interpret it, then by all means. I won't loose any sleep just because you got easily offended.
Nobody wants to help publish code who's only function is to circumvent something which is intended to make important web connections secure.
I don't want to have my CC numbers stolen just because some 14 year old blackhat finds your post on this site and copies the solution into his next worm.
And like Chris_F I'm about to get my unrestless sleep knowing that CG not have provided an code example that could have bad impact on my everyday net browsing.
Debugging is twice as hard as writing the code in the first place.
Therefore, if you write the code as cleverly as possible, you are, by
definition, not smart enough to debug it.
- Brian W. Kernighan
Reply With Quote
Re: Hooking the Https encryption
Originally Posted by Lindley
Bookmarks