SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is designed to transparently terminate connections that are redirected to it using a network address translation engine. SSLsplit then terminates SSL/TLS and initiates a new SSL/TLS connection to the original destination address, while logging all data transmitted. Besides NAT based operation, SSLsplit also supports static destinations and using the server name indicated by SNI as upstream destination. SSLsplit is purely a transparent proxy and cannot act as a HTTP or SOCKS proxy configured in a browser.
 
SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both IPv4 and IPv6. It also has the ability to dynamically upgrade plain TCP to SSL in order to generically support SMTP STARTTLS and similar upgrade mechanisms. SSLsplit fully supports Server Name Indication (SNI) and is able to work with RSA, DSA and ECDSA keys and DHE and ECDHE cipher suites. Depending on the version of OpenSSL built against, SSLsplit supports SSL 3.0, TLS 1.0, TLS 1.1 and TLS 1.2, and optionally SSL 2.0 as well.

SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encrypted network connections. It is intended to be useful for network forensics, application security analysis and penetration testing. SSLsplit is designed to transparently terminate connections that are redirected to it using a network address translation engine. SSLsplit then terminates SSL/TLS and initiates a new SSL/TLS connection to the original destination address, while logging all data transmitted. 

SSLsplit - Transparent SSL/TLS interception

Caddy is a general-purpose HTTP/2 web server that serves HTTPS by default. Caddy is fast, easy to use, and makes you more productive.
<ul>
<li>Easy configuration with the Caddyfile</li>
<li>Automatic HTTPS on by default (via <a href="https://letsencrypt.org">Let's Encrypt</a>)</li>
<li>HTTP/2 by default</li>
<li>Virtual hosting so multiple sites just work</li>
<li>Experimental QUIC support for those that like speed</li>
<li>TLS session ticket key rotation for more secure connections</li>
<li>Extensible with plugins because a convenient web server is a helpful one</li>
<li>Runs anywhere with no external dependencies (not even libc)</li>
</ul>

Caddy is a general-purpose HTTP/2 web server that serves HTTPS by default. Caddy is fast, easy to use, and makes you more productive.

Caddy - Fast, cross-platform HTTP/2 web server with automatic HTTPS

Discover open source projects across all platforms

Projects

SSLsplit - Transparent SSL/TLS interception

Caddy - Fast, cross-platform HTTP/2 web server with automatic HTTPS

TechStack

Tagcloud

License

Suggested keywords:

Projects

SSLsplit - Transparent SSL/TLS interception

Caddy - Fast, cross-platform HTTP/2 web server with automatic HTTPS

TechStack

Tagcloud

License