Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Pen-Test
[Top] [All Lists]

Re: looking for a HTTPS redirect tool

Subject: Re: looking for a HTTPS redirect tool
Date: Tue, 31 May 2005 19:26:25 +0200
Rajeev Kapoor wrote:
i am looking for a HTTPS redirect tool, not a proxy.
i need to test a web based application, it
communicates via port 443 only and doesnot have option of specifying the proxy
server, only server ip address can be given.
i want a redirect tool that will accept connections on
ssl and forward it to the web server, it should itself act like a web
server not a proxy server.
i could have achived it via Cain arp posioning but i
need to edit the data also
anybody know of such tool?
thanks,
rajeev

Sorry about coming late to this party.

WebScarab has this exact functionality.

Configure WebScarab in reverse-proxy mode, by supplying a "base URL" when creating the proxy listener. e.g. "https://www.example.com:443/";

Any request like "GET /resource HTTP/1.0" will then be appended to the supplied base (https://www.example.com:443/resource), and will be requested from the specified server. You then have all the WebScarab intercept and BeanScripting goodness for modifying your requests and responses as desired.

Let me know if you have any questions or problems getting this to work.

Regards,

Rogan

http://www.owasp.org/software/webscarab.html

<Prev in Thread] Current Thread [Next in Thread>