Comments (5)
cfc4n
commented on May 13, 2024
我看了下， 我的环境是ubuntu 21.04 ， SSHD是使用了OPENSSL的1.1.0类库，是静态编译的，符号表也被去除了。需要你自己用IDA Pro之类工具来定位一下SSL_Write\SSL_Read 两个函数的偏移地址offset，再手动指定到 eCapture参数里。
理论上是可以捕获的。
from ecapture.
GitHubAmos
commented on May 13, 2024
好的，3Q~
from ecapture.
sun363587351
commented on May 13, 2024
我看了下， 我的环境是ubuntu 21.04 ， SSHD是使用了OPENSSL的1.1.0类库，是静态编译的，符号表也被去除了。需要你自己用IDA Pro之类工具来定位一下SSL_Write\SSL_Read 两个函数的偏移地址offset，再手动指定到 eCapture参数里。
理论上是可以捕获的。
是否有CentOS8中解密SSH的方式，你是怎么查看sshd是否是使用了openssl类库？
from ecapture.
cfc4n
commented on May 13, 2024
看下我以前发的视频吧。 ldd 看动态链接库，或者ida静态分析。
from ecapture.
sun363587351
commented on May 13, 2024
看下我以前发的视频吧。
ldd看动态链接库，或者ida静态分析。
看过了，只是sshd 通过ldd好像没发现上述提到的两个函数
from ecapture.
Related Issues (20)
- Your environment is like a container. We won't be able to detect the BTF configuration. HOT 5
- Gotls Mode fails for stripped go binaries HOT 7
- Running ecapture with the --hex flag does not produce a hex output as expected from the video tutorial on Ubuntu 22.04. HOT 1
- Can eCapture save decrypted HTTP to pcapng instead of saving the master key to DSB? HOT 3
- [Proposal] Let TShark Do All the Dirty Work HOT 4
- eCapture consuming lot of memory HOT 9
- 请问模拟器如何 Enable BTF BPF Type Format (BTF) (Optional, 2022-04-17) HOT 7
- detectOpenssl consumes huge amount of memory HOT 1
- 是否能够支持Docker中https流量解密 HOT 2
- 怎么抓经过手机热点的流量 HOT 1
- gotls 捕获golang程序，不能写pcapfile文件,不能看到响应的内容 HOT 4
- Not working with redroid HOT 13
- windows也有ebpf，是否兼容适配？ HOT 1
- 鸿蒙4.0支持分析https内容不 HOT 3
- 关于在pcap模式中tc层skb_data payload数据传输的问题 HOT 3
- eCapture run failed, error log: invalid memory address or nil pointer dereference HOT 3
- Build 2 Android Arm64 HOT 1
- ssh加解密教程 HOT 4
- gotls 访问百度，https 包无法获取、只能截取 http 包 HOT 2
- 加解密模式对性能的影响是多少 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ecapture.