[Sentry MBA] 420 SSL handshake error - A more clean fix

[BruteForcer Rare]

Threads I've seen addressing security features invoking - among others - SSL handshake errors on unproper connection establishment are mostly quick fixes and do not directly address the real problem.
Putting an SSL-capable proxy between MBA and the target site won't help in certain cases, such as with depositfiles.com.
Here's a more natural and clean way to circumvent this problem:

Don't leech guys

[hide]

The problem relies in the nature of how secure sites are working.
Before even allowing users to connect to their login API a mechanism featured by the TLS is used -- SSL handshakes.
When you're logging in with a normal browser it implicitly sends a CONNECTION request including the version number, a random string of bytes,
a session id, the time the handshake server will be invalid and much more to together composite the handshake.
If it was successful the server will answer with an "Connection Established" response and signals that further traffic will flow through the encrypted tunnel.
It will mostly also show you the protocol specifications and the server certificate used to validate data.

http://i.imgur.com/lJgUmQc.png

We have a few options to fix this problem:

• Find another login API that accesses the same database as the desired one.
• Use a proxy that automatically initiates a SSL connection if demanded. (Does not work sometimes)
• Make a CONNECT request so you can further access the site's API

You could also try to manually generate handshake values once but this will not be working if you are using a config with proxies or the session needs to be refreshed.
It works on a few sites, though.

The cleanest way, however, is making a CONNECT request for each proxy and then redirect to the authentication stage.
Unfortunately Sentry MBA doesn't have this feature yet, so it would be an absolutely great idea to add custom HTTP headers.

To fulfill the usefulness of this post I've decided to mod the latest official MBA release and add said feature once my account here gains more reputation 

(As it makes no sense to waste my time if this will eventually get leeched anyways without getting some reputation for it)

[/hide]

 

[rufem1]

thank you man

[timo1993]

thanks

[jomi123]

Thank you very much friend.

[fabbri]

Grazie

[luchugsat]

Thanks a lot for sharing

[daveondisc Rare]

thanks

[ESCOBAR]

thanks

[kassan Rare Rare]

grazie

[yourfriendsteve]

those are the problems I have with the 420 sll, want to see your solitio, grazie

[Alireza75]

ty br0

[n905 Rare]

Thanks...

[cr4 Rare]

thx

[Mallus74]

grazie

[jankko60 Rare]

Thank you

[jankko60 Rare]

On 9/1/2017 at 10:21 AM, BruteForcer said:

 I've decided to .........................................

Tenemos un hombre que tiene 2 huevos .........  ¿esperamos?  .....  

I hope that the original Topic is read by Founder - ConfigMasta - Cracker   at least ......... 

 

Edited September 27, 2017 by jankko60

[ozgurcan1]

thanks for share

[titifayls]

thanks

[minx]

thanks

[crackingamigo Rare Rare]

great fix tut m8

[fl3xi4]

thanks

[akiraxjr Rare Rare]

Thanks for sharing bro

[clogged]

thanks

[ncmtc]

thank you man

[wwdream56]

thanks