Wireshark could decrypt https and display clear text(http) to user, but Wireshark do not support save clear text into pcap file, the content in pcap file is still encrypted even I can see the decrypt info before saving. I'd like to know if there is a way to capture https traffic and save it into pcap file with http format? Is it possible that setup a web proxy which can accepts SSL connections and forwards them over non-SSL, then use Wireshark to capture pcap at non-SSL side? Thanks in advance.
You can use PolarProxy to intercept TLS traffic and save the decrypted data to a PCAP file.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With