Research Academy
My account Customers About Blog Careers Legal Contact Resellers

Burp Suite User Forum

Create new post

Support TLS decryption with pre-master secret

Cedric | Last updated: Jun 03, 2016 10:48PM UTC

We are currently building a tool for extracting pre-master secret (PMS) values from memory of mobile devices. It would be great if Burp supported the decryption of TLS traffic with a list of PMS values just like Wireshark can (https://jimshaver.net/2015/02/11/decrypting-tls-browser-traffic-with-wireshark-the-easy-way/). If this too much of a stretch for a feature request, do you believe this functionality could be added through the Plugin API?

PortSwigger Agent | Last updated: Jun 06, 2016 01:21PM UTC

Thanks for this request. We've added it to our backlog. If other users run into a situation where this would be useful, let us know.

Diego | Last updated: Aug 25, 2024 03:18PM UTC

Hi is there any update about it ?

Michelle, PortSwigger Agent | Last updated: Aug 27, 2024 12:03PM UTC

Hi This idea did not get progressed at the time as there were other features that more users wanted to see brought into Burp. As Burp uses Java, it is possible to launch Burp from the CLI in a way that would allow you to create an sslkeylog file that could be used with WireShark. You can read about this on WireShark's wiki if you search the following link for Java: https://gitlab.com/wireshark/wireshark/-/wikis/TLS

You must be an existing, logged-in customer to reply to a thread. Please email us for additional support.