Timeline for Hijack attacked SSL/TLS-connections?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| May 27, 2015 at 19:32 | history | edited | Steffen Ullrich | CC BY-SA 3.0 |
added 22 characters in body
|
| May 27, 2015 at 19:29 | comment | added | Steffen Ullrich | No. Attacks like CRIME and BEAST depend on a specific behavior on the client side and need lots of traffic, so they are not usable for just a short redirection of one connection. I think POODLE also needs lots of data. FREAK and logjam are kind of similar but need a server having EXPORT ciphers and are or get fixed on the client side currently too, so you will not be able to use them for long. But at least these two should be doable if both sides are vulnerable by hijacking a single handshake. | |
| May 27, 2015 at 19:22 | comment | added | SEJPM | is this (in theory) possible with all known attacks (if clients are vulnerable) -> Logjam, FREAK, POODLE, exploited heartbleed, CRIME, BEAST, ... ? | |
| May 27, 2015 at 19:15 | history | answered | Steffen Ullrich | CC BY-SA 3.0 |