sslhook | Win32 DLL | SSH Utils library
kandi X-RAY | sslhook Summary
kandi X-RAY | sslhook Summary
SSLHOOK is a Win32 DLL that allows hooking of the OpenSSL functions SSL_read and SSL_write. Version 1 is designed to work against statically-compiled versions of OpenSSL (rather than the DLL version). As such sslhook requires some preconfiguration, which requires knowledge of the relative addresses of the SSL_read and SSL_write functions in the target binary.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of sslhook
sslhook Key Features
sslhook Examples and Code Snippets
Community Discussions
Trending Discussions on sslhook
QUESTION
I'm trying to hook OpenSSL's int SSL_connect(SSL *s)
method. OpenSSL 1.0.2l version.
Here's the source code:
GOAL:
Printing out any SSL_SESSION
member (like ssl_version or master_key)
THE PROBLEM:
I get Access Violation Exception when trying to access the SSL *s
parameter inside my hook method. Is there anything wrong with my structure? I don't think I must map all of the members of SSL
and SSL_SESSION
, because I found that SSLHook library doesn't do this - link
I'm able to inject the dll successfully, it does work when I'm not trying to access the parameter.
THE CODE:
...ANSWER
Answered 2020-Dec-01 at 14:29I don't think I must map all of the members of SSL and SSL_SESSION, because I found that SSLHook library doesn't do this
If you take a closer look you see, that they do not map everything but they keep the member order and they duplicate all members up to the "point" in the struct that is relevant for them. Ignoring the original padding in struct injections is almost always very critical and in general undefined behavior I guess, so you can be lucky to obtain a quite deterministic crash here :) So you can either provide the full struct or at least a reduced struct with the according final padding "before" your session member pointer.
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install sslhook
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page