简体繁体 English

C SSL代理“嗅探器” /解密器

[英]C SSL Proxy “Sniffer”/ Decryptor

原文 2017-12-24 15:24:43 9 1 c/ ssl/ proxy/ sniffer

I would like to re-program in C the program Burp ( https://portswigger.net/burp ), at least the part with the proxy. 我想在C程序Burp（ https://portswigger.net/burp ）中重新编程，至少要包含代理部分。

Burp starts on the computer a proxy over which then the clients in the network "log in" or "access" can. 打p在计算机上启动代理，然后网络中的客户端可以“登录”或“访问”。 A CA certificate from Burp will be installed on the clients. 来自Burp的CA证书将安装在客户端上。 From now on Burp can also read HTTPS traffic. 从现在开始，Burp还可以读取HTTPS流量。

I would like to re-program this principle in C. 我想用C重新编程这个原理。

I do not know which libraries to use for - the proxy - decrypting the data with de certificate key 我不知道该使用哪个库-代理-使用de证书密钥解密数据

1 个解决方案

Many people already wrote a proxy in C (for example, nginx). 许多人已经用C语言编写了一个代理（例如，nginx）。

You can often look through their C code and discover what they did and which libraries they used. 您通常可以浏览他们的C代码，发现他们做了什么以及使用了哪些库。

As for the network layer, I am biased since I'm the author of facil.io , which I love... But a quick search will offer libev , libuv and libevent as very common choices that support more platforms (such as Windows). 至于网络层，由于我是facil.io的作者（我很喜欢），我感到有偏见。但是快速搜索将提供libev ， libuv和libevent作为支持更多平台（例如Windows）的非常常见的选择。。