SSLsplit 是一個(gè)針對(duì)SSL/TLS加密的網(wǎng)絡(luò)連接進(jìn)行攻擊，為網(wǎng)絡(luò)取證和滲透測(cè)試的工具。它會(huì)終止SSL / TLS和啟動(dòng)一個(gè)新的連接到原來的目的地，記錄所有傳輸?shù)臄?shù)據(jù)。它支持普通的TCP和SSL，HTTP和HTTPS，和IPv4和IPv6。為SSL和HTTPS，它生成并簽署偽造X509v3證書上飛使用的原始憑證的主題DN和subjectAltName擴(kuò)展。它支持服務(wù)器名稱顯示，RSA，DSA和ECDSA密鑰，DHE 和ECDHE密碼套件。如果私鑰是可用的，它也可以使用現(xiàn)有的證書。

SSLsplit is a tool that performs man-in-the-middle attacks against SSL/TLS encrypted network connections for network forensics and penetration testing. It terminates SSL/TLS and initiates a new connection to the original destination, logging all data transmitted. It supports plain TCP and SSL, HTTP and HTTPS, and IPv4 and IPv6. For SSL and HTTPS, it generates and signs forged X509v3 certificates on-the-fly using the original certificate's subject DN and subjectAltName extension. It supports Server Name Indication, RSA, DSA, and ECDSA keys, and DHE and ECDHE cipher suites. It can also use existing certificates if the private key is available.