ctxis / canape

CANAPE Network Testing Tool

CANAPE Network Testing Tool Copyright (C) 2014 Context Information Security Originally developed by James Forshaw

This is the main code for the CANAPE network testing tool.

It is licensed under GPLv3. Note some other parts of the solution are licensed under different licenses, see other_licenses.txt for details.

Building:

The project has been tested in Visual Studio 2012 and 2013, it should just load up and you can build directly from the GUI

If you want to build the help file you need to install Sandcastle Help File Builder from https://shfb.codeplex.com/ and build the canape_doc.shfbproj project.

The installer can be built if necessary from CANAPEInstaller with the WiX toolkit.

Security Warning:

The projects CANAPE creates can contain dangerous data such as full privileged scripts which can be executed by just opening a project. Do not open projects from untrusted sources, ever! I've modified the project loader to do it's best to prevent serialization issues but you should consider the file format to be executable because of the script code.

Thanks to Graham Sutherland for making me actually bother to warn people and at least attempt to fix it.

canape's Issues

Compatibility with Visual Studio 10

Hello, how can i compile/import this Project with Visual Studio 10?

If i open CANAPE.sln project, VS says it´s build with newer version.

Thank you for your suggestion.

Error message on when selecting template

I have built the solution in Visual Studio 2012 but when i run it up (the CANAPE.gui project) and go to select a template I get the error message "Version of project (1.3) is older than the current version of CANAPE (1.4)"

Tried cleaning, rebuilding all etc and uninstalled version 1.3 but can't get it to work.

Any help greatly appreciated.

Errors when "SSL Network Layer" uses client certificate

Hello,

Thank you for your tool. I think it's really the best for security audits on thick clients :)

[1] I have an error when I would like to decrypt a SSL/TLS communication while there is a thick client authentication by certificate.

I have created a SSL filter in my socks proxy. This filter has a "SSL Network Layer".
I have loaded a .p12 file (public/private key of the thick client) in the configuration of this layer.
The "Require Client Certificate" check-box is enabled because the client will tried to authenticate with this certificate to the server.

Here is the error returned by Canape when the SSL/TLS communication is starting:

System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception. ---> System.ComponentModel.Win32Exception: Une erreur inconnue s’est produite lors du traitement du certificat
   --- End of inner exception stack trace ---
   at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
   at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
   at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
   at CANAPE.Net.Layers.SslNetworkLayer.ConnectServer(IDataAdapter adapter, Logger logger, PropertyBag properties)
   at CANAPE.Net.Layers.SslNetworkLayer.Negotiate(IDataAdapter& server, IDataAdapter& client, ProxyToken token, Logger logger, MetaDictionary meta, MetaDictionary globalMeta, PropertyBag properties, NetworkLayerBinding defaultBinding)
   at CANAPE.Net.ProxyNetworkService.ConnectClient(IDataAdapter baseAdapter, PropertyBag connProperties)

[2] I have tested the authentication by certificate with openssl.
There is no error with openssl:

openssl s_client -port $PORT -host $IP -prexit -cert clientKeystore.pem -key clientKeystore.pem

When I would like to use this clientKeystore.pem file (I'm sure it is good), Canape said that the "Certificate does not have a private key". Consequently, I can't use this .pem file to decrypt the communication.

Is it a bug or there is a mistake in my .pem and .p12 file ?

Thank you in advance for your help,