Frankencert - Revision history

Admin: Admin moved page Frankencerts to Frankencert

2016-08-27T07:38:50Z

Admin moved page Frankencerts to Frankencert

← Older revision	Revision as of 07:38, 27 August 2016
(No difference)

Admin: /* Install pyopenssl in virtualenv */

2016-08-27T02:55:12Z

Install pyopenssl in virtualenv

← Older revision		Revision as of 02:55, 27 August 2016
Line 17:		Line 17:
	It needs a custom build of PyOpenSSL, and if you try and remove PyOpenSSL from Kali using aptitude, it wants to uninstall kali-linux-full. Yikes.		It needs a custom build of PyOpenSSL, and if you try and remove PyOpenSSL from Kali using aptitude, it wants to uninstall kali-linux-full. Yikes.

	Using a virtual environment. Refresher on how to use them here: [http://docs.python-guide.org/en/latest/dev/virtualenvs/] or here: [[~~Python/~~Virtualenv]]		Using a virtual environment. Refresher on how to use them here: [http://docs.python-guide.org/en/latest/dev/virtualenvs/] or here: [[Virtualenv]]

	<pre>		<pre>

Admin: /* Install pyopenssl in virtualenv */

2016-08-27T02:54:55Z

Install pyopenssl in virtualenv

← Older revision		Revision as of 02:54, 27 August 2016
Line 17:		Line 17:
	It needs a custom build of PyOpenSSL, and if you try and remove PyOpenSSL from Kali using aptitude, it wants to uninstall kali-linux-full. Yikes.		It needs a custom build of PyOpenSSL, and if you try and remove PyOpenSSL from Kali using aptitude, it wants to uninstall kali-linux-full. Yikes.

	Using a virtual environment.		Using a virtual environment. Refresher on how to use them here: [http://docs.python-guide.org/en/latest/dev/virtualenvs/] or here: [[Python/Virtualenv]]

	<pre>		<pre>
Line 49:		Line 49:

	(This is currently where I'm getting stuck. It compiles the library and the code successfully, but it issues a warning about an SSLv3 function in pyOpenSSL C code. When I actually run frankencert, it crashes in that exact function.		(This is currently where I'm getting stuck. It compiles the library and the code successfully, but it issues a warning about an SSLv3 function in pyOpenSSL C code. When I actually run frankencert, it crashes in that exact function.


	===Run frankencert===		===Run frankencert===

Admin: /* Installing */

2016-08-27T02:54:27Z

Installing

← Older revision		Revision as of 02:54, 27 August 2016
Line 4:		Line 4:

	==Installing==		==Installing==

			===Install openssl===

	Frankencerts needs OpenSSL development headers, so install those:		Frankencerts needs OpenSSL development headers, so install those:
Line 10:		Line 12:
	$ apt-get install libssl-dev		$ apt-get install libssl-dev
	</pre>		</pre>

			===Install pyopenssl in virtualenv===

	It needs a custom build of PyOpenSSL, and if you try and remove PyOpenSSL from Kali using aptitude, it wants to uninstall kali-linux-full. Yikes.		It needs a custom build of PyOpenSSL, and if you try and remove PyOpenSSL from Kali using aptitude, it wants to uninstall kali-linux-full. Yikes.
Line 43:		Line 47:
	(venv) $ python setup.py install		(venv) $ python setup.py install
	</pre>		</pre>

			(This is currently where I'm getting stuck. It compiles the library and the code successfully, but it issues a warning about an SSLv3 function in pyOpenSSL C code. When I actually run frankencert, it crashes in that exact function.


			===Run frankencert===

	Now grab the frankengen directory and the utilities provided with frankencert:		Now grab the frankengen directory and the utilities provided with frankencert:
Line 51:		Line 60:

	Currently running into an issue: can't install/run because SSLv3 functionality not available from OpenSSL library. Warning, implicitly declared function. SSLv23 is just fine. don't understand what the issue is.		Currently running into an issue: can't install/run because SSLv3 functionality not available from OpenSSL library. Warning, implicitly declared function. SSLv23 is just fine. don't understand what the issue is.


	=Flags=		=Flags=

	{{MITMFlag}}		{{MITMFlag}}

Admin at 02:52, 27 August 2016

2016-08-27T02:52:57Z

← Older revision		Revision as of 02:52, 27 August 2016
Line 51:		Line 51:

	Currently running into an issue: can't install/run because SSLv3 functionality not available from OpenSSL library. Warning, implicitly declared function. SSLv23 is just fine. don't understand what the issue is.		Currently running into an issue: can't install/run because SSLv3 functionality not available from OpenSSL library. Warning, implicitly declared function. SSLv23 is just fine. don't understand what the issue is.


			=Flags=

			{{MITMFlag}}

Admin: /* Installing */

2016-08-27T02:52:35Z

Installing

← Older revision		Revision as of 02:52, 27 August 2016
Line 44:		Line 44:
	</pre>		</pre>

	Now grab the frankengen directory and ~~hte~~ utilities provided with frankencert:		Now grab the frankengen directory and the utilities provided with frankencert:

	<pre>		<pre>
	(venv) $ cp -r /path/to/frankencert/{utils,frankengen} .		(venv) $ cp -r /path/to/frankencert/{utils,frankengen} .
	</pre>		</pre>

			Currently running into an issue: can't install/run because SSLv3 functionality not available from OpenSSL library. Warning, implicitly declared function. SSLv23 is just fine. don't understand what the issue is.

Admin: Created page with "Frankencerts facilitates Man in the Middle/HTTPS attacks by providing a fuzzing framework for certificates. This basically starts with a base input certificate, then fuzz..."

2016-08-27T02:40:15Z

Created page with "Frankencerts facilitates Man in the Middle/HTTPS attacks by providing a fuzzing framework for certificates. This basically starts with a base input certificate, then fuzz..."

New page

Frankencerts facilitates [[Man in the Middle/HTTPS]] attacks by providing a fuzzing framework for certificates.

This basically starts with a base input certificate, then fuzzes the certificate in order to test a certificate checking mechanism and see if it breaks.

==Installing==

Frankencerts needs OpenSSL development headers, so install those:

<pre>
$ apt-get install libssl-dev
</pre>

It needs a custom build of PyOpenSSL, and if you try and remove PyOpenSSL from Kali using aptitude, it wants to uninstall kali-linux-full. Yikes.

Using a virtual environment.

<pre>
$ pip install virtualenv
$ virtualenv venv
</pre>

Now you can do a couple of things. To run an interpreter (python comamnd line) using the virtual environment:

<pre>
$ virtualenv -p /usr/bin/python2.7 venv # run the python interpreter using this virtual environment
</pre>

We want to install the custom version of PyOpenSSL, then install Frankencerts, in our virtual environment. Start by copying the modified PyOpenSSL from frankencerts project into our virtual directory:

<pre>
$ cp -r /path/to/frankencerts/pyOpenSSL-0.13 .
</pre>

Now we can install this by running setup.py build/install, but using our virtual environment python binary:

<pre>
$ source venv/bin/activate

(venv) $ ls
pyOpenSSL-0.13 venv
(venv) $ cd pyOpenSSL-0.13/
(venv) $ python setup.py build
(venv) $ python setup.py install
</pre>

Now grab the frankengen directory and hte utilities provided with frankencert:

<pre>
(venv) $ cp -r /path/to/frankencert/{utils,frankengen} .
</pre>