Hooking the Https encryption
CodeGuru Home VC++ / MFC / C++ .NET / C# Visual Basic VB Forums Developer.com
Page 1 of 2 12 LastLast
Results 1 to 15 of 17

Thread: Hooking the Https encryption

  1. #1
    Join Date
    Sep 2009
    Posts
    18

    Hooking the Https encryption

    Hi

    I would like to know what DLL function deals with the Https encryption so i can hook it.

    I used to hook the send() function from ws2_32.dll and filter data, but with and Https connexion data are encrypted, then i need to hook the encrypting function. Where is it? What is name?

  2. #2
    Join Date
    Nov 2003
    Location
    Belgium
    Posts
    8,062

    Re: Hooking the Https encryption

    What are you trying to accomplish?

  3. #3
    Join Date
    Sep 2009
    Posts
    18

    Re: Hooking the Https encryption

    I'am trying to filter some words.

    i used to hook the send() function from ws2_32.dll but it does not work with a https connexion since data are crypted

  4. #4
    Join Date
    Sep 2009
    Posts
    18

    Re: Hooking the Https encryption

    nobody?

  5. #5
    Join Date
    Sep 2009
    Posts
    18

    Red face Re: Hooking the Https encryption

    please
    need help

  6. #6
    Lindley is offline Elite Member Power Poster
    Join Date
    Oct 2007
    Location
    Fairfax, VA
    Posts
    10,888

    Re: Hooking the Https encryption

    Generally things that encrypt data are intending to prevent you from seeing what it is. Most of us aren't inclined to help anyone bypass such measures without more of an explanation.

  7. #7
    Join Date
    Sep 2009
    Posts
    18

    Re: Hooking the Https encryption

    Quote Originally Posted by Lindley View Post
    Generally things that encrypt data are intending to prevent you from seeing what it is. Most of us aren't inclined to help anyone bypass such measures without more of an explanation.
    I yet explained what i was trying to do twice....

    I need to make an appli which replace a given word by another one.
    I used to hook the send() function and it was working great, but i recently noticied that it does not work when it comes to Https.

    where is the evil in me hooking a crypting Https function on my computer ??

  8. #8
    Join Date
    Aug 2008
    Posts
    902

    Re: Hooking the Https encryption

    Quote Originally Posted by Usopp View Post
    where is the evil in me hooking a crypting Https function on my computer ??
    On your computer? I suppose none.

    On someone Else's computer? Unquantifiable.

    Therein lies the problem.

  9. #9
    Join Date
    Sep 2009
    Posts
    18

    Re: Hooking the Https encryption

    Quote Originally Posted by Chris_F View Post
    On your computer? I suppose none.

    On someone Else's computer? Unquantifiable.

    Therein lies the problem.
    Cant see how you can allow yourself to take part in a discussion to call someone a malicious or a robber

    by the way i'am totally sure you dont have any clues about how resolving this issue.

  10. #10
    Join Date
    Apr 2000
    Location
    Belgium (Europe)
    Posts
    3,765

    Re: Hooking the Https encryption

    TBH, there's nothing "wrong" in the question, getting to a point where you could even get code to execute hooking already means you've managed to get into controlling every aspect of the machine.

    If you'ld done a little bit of work, you would have figured out on your own that what you need is CAPI or the Crypto API, or in the case of Vista and later CNG (CAPI next generation).

    What you ask isn't going to work however. The crypto uses a PRK. And you don't have the decryption key.

  11. #11
    Join Date
    Oct 2006
    Location
    Sweden
    Posts
    3,632

    Re: Hooking the Https encryption

    Quote Originally Posted by Usopp View Post
    Cant see how you can allow yourself to take part in a discussion to call someone a malicious or a robber
    Even if you have nothing but good intentions keep in mind that this site is public. If a solution to your issue is posted it's also usable for all and everyone with malicious intents.

    Posting some pissed off comments won't do you any good either, this site is populated with grown up peoples that actually do get a good night's sleep even though some stranger on the net post bad stuff.
    Debugging is twice as hard as writing the code in the first place.
    Therefore, if you write the code as cleverly as possible, you are, by
    definition, not smart enough to debug it.
    - Brian W. Kernighan

    To enhance your chance's of getting an answer be sure to read
    http://www.codeguru.com/forum/announ...nouncementid=6
    and http://www.codeguru.com/forum/showthread.php?t=366302 before posting

    Refresh your memory on formatting tags here
    http://www.codeguru.com/forum/misc.php?do=bbcode

    Get your free MS compiler here
    http://www.microsoft.com/visualstudio/eng/downloads

  12. #12
    Join Date
    Sep 2009
    Posts
    18

    Re: Hooking the Https encryption

    Quote Originally Posted by S_M_A View Post
    Even if you have nothing but good intentions keep in mind that this site is public. If a solution to your issue is posted it's also usable for all and everyone with malicious intents.

    Posting some pissed off comments won't do you any good either, this site is populated with grown up peoples that actually do get a good night's sleep even though some stranger on the net post bad stuff.
    You should keep your selective and sententious moraling "stuff" to those not so grown up peoples like Chris_F who come into a topic to assault original poster, calling them a thief without any good raison. Once you do that, you can go to bed.
    Last edited by Usopp; December 23rd, 2010 at 02:04 PM.

  13. #13
    Join Date
    Sep 2009
    Posts
    18

    Re: Hooking the Https encryption

    Quote Originally Posted by OReubens View Post
    TBH, there's nothing "wrong" in the question, getting to a point where you could even get code to execute hooking already means you've managed to get into controlling every aspect of the machine.

    If you'ld done a little bit of work, you would have figured out on your own that what you need is CAPI or the Crypto API, or in the case of Vista and later CNG (CAPI next generation).

    What you ask isn't going to work however. The crypto uses a PRK. And you don't have the decryption key.
    I'am not about to decrypt, but to hook the encrypting function, and then let the encrypting function do its job.

    I'am on windows XP, not vista.

  14. #14
    Join Date
    Aug 2008
    Posts
    902

    Re: Hooking the Https encryption

    Quote Originally Posted by Usopp View Post
    like Chris_F who come into a topic to assault original poster, calling them a thief
    Now you're putting words in my mouth. If that's how you want to interpret it, then by all means. I won't loose any sleep just because you got easily offended.

    Nobody wants to help publish code who's only function is to circumvent something which is intended to make important web connections secure.

    I don't want to have my CC numbers stolen just because some 14 year old blackhat finds your post on this site and copies the solution into his next worm.

  15. #15
    Join Date
    Oct 2006
    Location
    Sweden
    Posts
    3,632

    Re: Hooking the Https encryption

    And like Chris_F I'm about to get my unrestless sleep knowing that CG not have provided an code example that could have bad impact on my everyday net browsing.
    Debugging is twice as hard as writing the code in the first place.
    Therefore, if you write the code as cleverly as possible, you are, by
    definition, not smart enough to debug it.
    - Brian W. Kernighan

    To enhance your chance's of getting an answer be sure to read
    http://www.codeguru.com/forum/announ...nouncementid=6
    and http://www.codeguru.com/forum/showthread.php?t=366302 before posting

    Refresh your memory on formatting tags here
    http://www.codeguru.com/forum/misc.php?do=bbcode

    Get your free MS compiler here
    http://www.microsoft.com/visualstudio/eng/downloads

Page 1 of 2 12 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Azure Activities Information Page

Windows Mobile Development Center


Click Here to Expand Forum to Full Width

This is a CodeGuru survey question.


Featured


HTML5 Development Center