应用OpenSSL对SSL协议中间人攻击的实现

SSL是在互联网上提供安全通讯的密码学协议。在分析SSL协议和中间人攻击原理的基础上,利用OpenSSL开发库实现了中间人攻击,包括会话劫持、公钥证书的伪造和数据的转发,为用户安全使用SSL协议提供了建议和参考。

The Implementation of SSL Man-in-the-middle Attack Using OpenSSL

SSL was a cryptographic protocol that provides secure communications on the Internet. This paper first analysed the principle of SSL protocol and man-in-the-middle attack, then introduced how to implemente man-in-the-middle Attack using OpenSSL Library, including Session Hijack, falsification of X.509 digital certificate and relayed messages between victims. The experiment provided recommendations and reference for clients using SSL protocol in security.