Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Favorites |
infavorites:mine infavorites:1234 |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
SSL (Secure Sockets Layer) and/or TLS (Transport Layer Security)
0
votes
1answer
I have a MITM setup between a client and a server - the client only supports TLSv1 when it comes to that server and the server support SSLv3 up to TLSv1.2.
There is a vulnerability on the server whic …
asked Nov 30 '16 by Zach P
1
vote
0answers
I have a device that functions as a server and uses OpenSSL - it supports SSLv3 and TLS 1.0. That same device also functions as a client to some other servers - I am trying to see if I can downgrade … when I am trying to simply change the protocol version in the TLS 1.0 handshake to show that SSLv3 is the highest supported I get an error - but not on the server, rather on the device itself!
This was …
asked Nov 15 '16 by Zach P
1
vote
0answers
I know it won't work on every server because some don't allow SSLv3 but I tried many servers and my attack doesn't seem to work.
For now, I attempt to downgrade to TLS 1.0 (also recognized by the … my own personal device) tries to send a ClientHello I check the version of the conversation it is trying to initiate - if the number is bigger than 769 (TLS 1.0) I send a FIN, ACK message in the name …
asked Nov 2 '16 by Zach P
