hi,
consider using the ssltunnel from www.stunnel.org. you can run it as
a server and put another client in the same machine.
(ProxyAware CGI- Scanner) -> (localhost 80 stunnel in client/server
mode)----->(target webserver). one limitation is that the cgi-scanner
has to support proxies.
e.g..,
stunnel.exe -c -d <yourmachine's ip>:80 -r <target machine>:443 -o
c:\<logfile name>
regards,
Suresh Ponnusami,
Internet Security Consultant,
nSecure Software (P) Ltd., INDIA
> I want take a penetration testing aiming for my SSL Web server by means
> of securetunnel or OpenSSL. I know sslproxy can be used by common scanner
> such as whisker. But it's a problem that OpenSSL for Win32 running as
client
> couldn't response for my console input. I searched for
> some tips on FAQ's, and found that the problem was just on Windows. But it
> was same result on Linux. Anyone can tell me what is't?
> By the way, merry x'mas for you!
>
>
>
