[Owasp-dotnet] Adding an inProcess proxy for SSL to O2

[dinis cruz]

To make it easier to script injections and traffic analysis of the IE Automation objects (for example direct cookie manipulation and payloads injection), I was thinking of adding a quick http/ssl proxy to O2 .

This looks perfect, but the ssl part breaks:  http://www.codeproject.com/KB/IP/HTTPSDebuggingProxy.aspx

I was getting the exception "An established connection was aborted by the software in your host machine" 

Note: to test this (as the author recommends in the comments) I created a local cert using:

• makecert.exe "c:\temp\cert.cer" -a sha1 -n "CN=matt-dot-net" -sr LocalMachine -ss My -sky signature -pe -len 2048

Any ideas on the problem? Note that the site I was connecting to didn't had a valid ssl cert (i.e. locally created cert)

Dinis Cruz

Blog: http://diniscruz.blogspot.com
Twitter: http://twitter.com/DinisCruz
Web: http://www.owasp.org/index.php/O2