11

I'm looking for SSL proxy capable of dumping requests.

I want to test custom browser against SSL-MITM attacks.

I'm able to re-route all traffic ongoing from browser to machine with proxy.

Basically proxy should:

  • initiate SSL connection with legitimate website
  • issue self-signed certificate
  • pass data received from legitimate website to browser
  • capture requests issued by browser
pixel
  • 247
  • 1
  • 2
  • 7

3 Answers3

9

Burp Suite is one of the best.

Tate Hansen
  • 13,714
  • 3
  • 40
  • 83
9

If you want a stand alone app, Fiddler works nicely with SSL capture enabled.

Steve
  • 15,155
  • 3
  • 37
  • 66
1

I typically use Burp Proxy - it seems to do everything you would need. Or if you want to do more, the entire Burp Suite does a huge amount. It is my first goto tool for the automated part of a security assessment, allowing me to spider an application, run scripts, test for particular vulnerabilities, and even an element for fuzzing/sequencing.

Rory Alsop
  • 61,367
  • 12
  • 115
  • 320