Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 7 Mar 2014 12:56:15 +0400
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: Re: IMAP STARTTLS sniff tool

Hi,

On Fri, Mar 07, 2014 at 09:37:01AM +0100, Bob Ezrin wrote:
> Hi all. We managed succesfully to sniff inside POP3S, SMTPS, IMAPS & HTTPS tunnels using arpspoof, iptables & sslsplit to make MITM. Now we want to sniff inside STARTTLS tunnels (specifically IMAP) but unfortunately sslsplit doesn't supports STARTTLS. Is there/do you know another SSL/TLS tool supporting IMAP over STARTTLS to make MITM? Many thanks B.

Sorry for not addressing your (mostly off-topic) question directly (I
don't know the answer), but it got me wondering what the most
appropriate mailing list would be for this sort of topics.  We mostly
haven't been using the oss-security list for such topics so far, and it
is unclear whether such broader scope is desirable or not.  In part,
this might depend on whether there exists a more suitable list or not.

I'd think that maybe the Penetration Testing list could be it:

http://www.securityfocus.com/archive/101/description
http://seclists.org/pen-test/

but it appears rather inactive lately.  Yet I think it's worth posting
the question in there, at least to see if the list is currently usable
(would anyone reply?)  Bob, can you try that?

Opinions?

Alexander

Powered by blists - more mailing lists

Your e-mail address:

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ