Monday, February 24, 2014

Modify or read https message before sending to server within a client.
































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































I am trying to check the integrity in a Bank Transaction that the message sent to the server has not been modified by any malware in the client system. For this I am trying to read the message sent to the server at the client boundary so as that it enters the network as customer with customer intended values. So, firstly I need to check where to I need intercept the message within client boundary. Secondly, Can I intercept the message and read its contents using Java?
































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































For a more clearer description , I rephrased my problem as below.































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































I want to check what my Online Banking Server( Leta Say Bank of America) receives if I ask to transfer amount $100 to Account A . I assume that there is a malware in client system that changes recipient to B,$10000. My aplicaion which I intend to design, shoudl inform the user that the integrity of the message is compromised and should give the option to the user to abort it. plan to track what message is being sent from client to server. This I want to achieve by reading the message from client at the last point before it leaves the client and enter the network. Hope I am clear now. kindly let me know if I am not
































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































I am a newbie to Java. Can someone point me in right direction and let me know how to do it in Java?































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































































No comments:

Post a Comment