TLSI

PolarProxy + Docker

PolarProxy in Docker

| | AArch64, arm32, arm64, container, curl, DNAT, Docker, Dockerfile, HTTPS, pcap, PCAP-over-IP, pcapoverip, PolarProxy, proxy, TLS, TLSI, X.509, x509
Our transparent TLS proxy PolarProxy is gaining lots of popularity due to how effective it is at generating decrypted PCAP files in combination with how easy it is to deploy. In this ...
NETRESEC Network Security Blog
PolarProxy + Docker

PolarProxy in Docker

| | AArch64, arm32, arm64, container, curl, DNAT, Docker, Dockerfile, HTTPS, pcap, PCAP-over-IP, pcapoverip, PolarProxy, proxy, TLS, TLSI, X.509, x509
Our transparent TLS proxy PolarProxy is gaining lots of popularity due to how effective it is at generating decrypted PCAP files in combination with how easy it is to deploy. In this ...
NETRESEC Network Security Blog
Laptop, Raspberry Pi, PolarProxy, Internet ASCII

Discovered Artifacts in Decrypted HTTPS

| | adnxs.com, CS3, CS3Sthlm, decrypt, forensics, HTTP/2, http2, incoming.telemetry.mozilla.org, majestic, Majestik møøse, NetworkMiner, pcap, PolarProxy, reddit, telemetry, TLS, TLSI, Wireshark, x-moose, X-Proxy-Origin
We released a PCAP file earlier this year, which was recorded as part of a live TLS decryption demo at the CS3Sthlm conference. The demo setup used PolarProxy running on a Raspberry ...
NETRESEC Network Security Blog
Erik presenting PolarProxy at CS3Sthlm, photo credit: CS3Sthlm

Sharing a PCAP with Decrypted HTTPS

| | CS3, CS3Sthlm, decrypt, DoH, forensics, google, HTTP/2, http2, HTTPS, NetworkMiner, Pastebin, pcap, PolarProxy, TLS, TLS Inspection, TLS Interception, TLSI, Twitter, video, Wireshark
Modern malware and botnet C2 protocols use TLS encryption in order to blend in with 'normal' web traffic, sometimes even using legitimate services like Twitter or Instagram. I did a live demo ...
NETRESEC Network Security Blog
NSA TLSI advisory header

The NSA HSTS Security Feature Mystery

| | break, HSTS, inspect, kryptera.se, NetworkMiner, nsa, PolarProxy, RFC6797, RFC8471, RFC8473, TLS, TLS Inspection, TLS Interception, TLSI, Wireshark
I recently stumbled across an NSA Cyber Advisory titled Managing Risk from Transport Layer Security Inspection (U/OO/212028-19) after first learning about it through Jonas Lejon's blog post NSA varnar för TLS-inspektion (Swedish) ...
NETRESEC Network Security Blog