https://github.com/ivan-sincek/pre-master-secret-key
Set up all you need to capture pre-master secret keys to decrypt SSL in Wireshark.
https://github.com/ivan-sincek/pre-master-secret-key
batch decrypt-ssl decrypt-tls defensive-security environment-variables ethical-hacking incident-response offensive-security secret-keys security threat-hunting wireshark
Last synced: 3 months ago
JSON representation
Set up all you need to capture pre-master secret keys to decrypt SSL in Wireshark.
- Host: GitHub
- URL: https://github.com/ivan-sincek/pre-master-secret-key
- Owner: ivan-sincek
- License: mit
- Created: 2020-08-17T19:50:11.000Z (over 4 years ago)
- Default Branch: master
- Last Pushed: 2021-12-30T16:55:41.000Z (over 3 years ago)
- Last Synced: 2024-10-17T16:21:18.513Z (7 months ago)
- Topics: batch, decrypt-ssl, decrypt-tls, defensive-security, environment-variables, ethical-hacking, incident-response, offensive-security, secret-keys, security, threat-hunting, wireshark
- Language: Batchfile
- Homepage:
- Size: 50.8 KB
- Stars: 5
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Pre-Master Secret Key
Just a simple Batch script that will help you set up all you need to capture pre-master secret keys to decrypt SSL in Wireshark.
Script will create SSLKEYLOGFILE environment variable and `ssl-key.log` file on your desktop.
Reference point was this [article](https://www.comparitech.com/net-admin/decrypt-ssl-with-wireshark).
Tested with Wireshark v3.2.6 (64-bit) on Windows 10 Enterprise OS (64-bit).
Made for educational purposes. I hope it will help!
## How to Run
Double click on the script or open the Command Prompt from [\\src\\](https://github.com/ivan-sincek/pre-master-secret-key/tree/master/src) and run the following command:
```fundamental
pre_master_secret_key.bat
```
Open Wireshark and go to `Edit -> Preferences -> Protocols -> TLS` and load the path to `ssl-keys.log` into `(Pre-)Master-Secret log filename` input filed.
Start recording network traffic.
If you suddenly cannot delete the log file even after closing the web browser, it is possible that some other program is still writing in the file, e.g OneDrive, Dropbox, etc.
## Images
Figure 1 - Run (Create)
Figure 2 - Run (Remove)