title: How do I use a self-signed certificate to sniff encrypted traffic from client to some website?
body: <p>For my Internet Security course, I was given a project where I am to ultimately take advantage of the "remember my password" on a site by creating a certificate, manually put it in my "clients" browser to be trusted and then be able to sniff all session IDs when the client connects to a website's server. After doing this, I am to use the session ID to post onto profiles feed (twitter for example) but this part is later in the course. However, I do not know how I am to use the certificate in the first place? If its a real website, I would think I would make a copy or a phishing version of the site but that's not what my professor wants I think. He said to create certificate, upload it into whatever browser I use to log into twitter and somehow i'll be able to sniff encrypted traffic and see session IDs using PCAP library. All he wants is for me to document the IDs in the report.. </p>
  
  <p>I was thinking of using something along the lines of DHCP rogue server but I dont think I will be using a certificate that I made myself this way.</p>