jetlib.sec » Tags » ssl-connections

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

3 items tagged "ssl connections"

Related tags: vulnerability [+], tool [+], man in the middle attack [+], lan [+], certificate chain [+], certificate [+], ssl [+], read [+], hotmail [+], firesheep [+], firefox [+], darknet [+], Countermeasures [+]

• July 27, 2011
• 10:44

  SSLSniff 0.8

   » ‎ Packet Storm Security Recent Files
  This tool was originally written to demonstrate and exploit IE's vulnerability to a specific "basicConstraints" man-in-the-middle attack. While Microsoft has since fixed the vulnerability that allowed leaf certificates to act as signing certificates, this tool is still occasionally useful for other purposes. It is designed to MITM all SSL connections on a LAN and dynamically generates certs for the domains that are being accessed on the fly. The new certificates are constructed in a certificate chain that is signed by any certificate that you provide.

  Tags:  vulnerability tool certificate lan ssl-connections man-in-the-middle-attack certificate-chain  

• 10:44

  SSLSniff 0.8

   » ‎ Packet Storm Security Misc. Files
  This tool was originally written to demonstrate and exploit IE's vulnerability to a specific "basicConstraints" man-in-the-middle attack. While Microsoft has since fixed the vulnerability that allowed leaf certificates to act as signing certificates, this tool is still occasionally useful for other purposes. It is designed to MITM all SSL connections on a LAN and dynamically generates certs for the domains that are being accessed on the fly. The new certificates are constructed in a certificate chain that is signed by any certificate that you provide.

  Tags:  vulnerability tool certificate lan ssl-connections man-in-the-middle-attack certificate-chain  

• November 25, 2010
• 2:19

  BlackSheep – Detect Users Of FireSheep On The Network

   » ‎ Darknet
  As you surely know, things blew up recently at Toorcon 12 with the release of the much talked about Firefox plugin called Firesheep. There were various discussions about how to mitigate against it like using Firefox plug-ins to force SSL connections (where available). Microsoft also tried to secure Hotmail with SSL but kinda b0rked that [...]
  
  Read the full post at darknet.org.uk

  
  

  

  Tags:  firesheep ssl firefox read ssl-connections hotmail darknet Countermeasures