[Owasp-dotnet] Adding an inProcess proxy for SSL to O2

[dinis cruz]

To make it easier to script injections and traffic analysis of the IE
Automation objects (for example direct cookie manipulation and payloads
injection), I was thinking of adding a quick http/ssl proxy to O2
<http://o2platform.com>.

This looks perfect, but the ssl part breaks:
http://www.codeproject.com/KB/IP/HTTPSDebuggingProxy.aspx

I was getting the exception "An established connection was aborted by the
software in your host machine"

Note: to test this (as the author recommends in the comments) I created a
local cert using:

   - makecert.exe "c:\temp\cert.cer" -a sha1 -n "CN=matt-dot-net" -sr
   LocalMachine -ss My -sky signature -pe -len 2048

Any ideas on the problem? Note that the site I was connecting to didn't had
a valid ssl cert (i.e. locally created cert)

Dinis Cruz

Blog: http://diniscruz.blogspot.com
Twitter: http://twitter.com/DinisCruz
Web: http://www.owasp.org/index.php/O2
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-dotnet/attachments/20111110/75943575/attachment.html