Wednesday, 14 December 2011

Howto: Decoding malware SSL using Burp proxy

This post is summary from Source. If you want all details, please go to the Source.

1. Enable port forwarding
- sudo echo 1 > /proc/sys/net/ipv4/ip_forward

2. Use firewall to redirect from 80,443 to 8080
- sudo iptables -P FORWARD ACCEPT
- sudo iptables -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-ports 8080
- sudo iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --

No comments:

Post a Comment