This document discusses using self-signed certificates to impersonate SSL connections. It shows how the Metasploit tool can be used to copy a certificate from a remote host and export it locally in under 15 seconds. While self-signed certificates are easy to generate, they may raise warnings for users and can be detected by technicians as invalid unless provided with a fabricated explanation.

5. Self-signed cert in action

9. Result (0) As near as darn a clone of the original Fingerprints + Serial Number differ

10. Result (1) All CN data is 100% cloned… Average users don’t care!

11. But we DO pay attention! Techies might notice… maybe! So give them a REASON why…

12. But we DO pay attention! OH, our self signed cert expired yesterday. I’ll sort that later ;)

13. # WIMMING