Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Collaborate with other network protocol analyzers/generate SSLKEYLOGFILE #27

Closed
robberphex opened this issue Apr 4, 2022 · 6 comments · Fixed by #140
Closed

Collaborate with other network protocol analyzers/generate SSLKEYLOGFILE #27

robberphex opened this issue Apr 4, 2022 · 6 comments · Fixed by #140
Assignees
@cfc4n
Labels
documentation Improvements or additions to documentation enhancement New feature or request help wanted Extra attention is needed

Comments

@robberphex
Copy link

Thank you, ecapture is a great tool for tls capture.

Currently, ecapture cannot use other network analyzer, i.e. Wireshark. ecapture may support generate SSLKEYLOGFILE and pcap file, which can be analyzed by Wireshark.

P.S. NSS Key Log Format

P.S. Keylog could embed into pcapng file
@cfc4n
Copy link
Member

cfc4n commented Apr 4, 2022

I thought about this feature.

Runtime data is missing a lot of IP protocol stack data, and it is difficult to got target network layer and runtime data.

Do you have any good idea?

@cfc4n
Copy link
Member

cfc4n commented Apr 9, 2022

ref : https://security.stackexchange.com/questions/80158/extract-pre-master-keys-from-an-openssl-application

@cfc4n cfc4n added the enhancement New feature or request label Apr 9, 2022
@cfc4n cfc4n self-assigned this Apr 9, 2022
@mosajjal
Copy link
Contributor

I'd be keen to have a stab at this at some point and leverage ecapture to further enhance my pet project tcpshark

@cfc4n
Copy link
Member

cfc4n commented Jun 13, 2022

I'd be keen to have a stab at this at some point and leverage ecapture to further enhance my pet project tcpshark

Waiting for good news.

@cfc4n cfc4n added documentation Improvements or additions to documentation help wanted Extra attention is needed labels Jun 17, 2022
@Ubbo-Sathla
Copy link

好人一生平安

cfc4n added a commit that referenced this issue Jul 19, 2022
@cfc4n
support : #27 capture openssl master key .
018abc0 
Signed-off-by: CFC4N <[email protected]>
@cfc4n cfc4n linked a pull request Jul 19, 2022 that will close this issue
New feature: capture openssl masterkey #27 #140
Merged
@cfc4n cfc4n mentioned this issue Jul 19, 2022
Merged
cfc4n added a commit that referenced this issue Jul 20, 2022
@cfc4n
Merge pull request #140 from ehids/openssl-masterkey
f280144 
New feature: capture openssl masterkey  #27
@cfc4n cfc4n mentioned this issue Aug 5, 2022
Merged
@robberphex
Copy link
Author

DSB(Decryption Secrets Block) works perfectly! Thanks!
image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@cfc4n cfc4n

Labels
documentation Improvements or additions to documentation enhancement New feature or request help wanted Extra attention is needed
Projects
None yet
Milestone
No milestone
4 participants
@cfc4n @robberphex @mosajjal @Ubbo-Sathla