+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: SSL 2.0 deprecated protocol? (/showthread.php?tid=2410269)
SSL 2.0 deprecated protocol? - Abdilo - Apr 16, 2012
Hey guys,
I found a SSL 2.0 deprecated protocol (High Level Threat) in a popular website.
Can this be exploited?
Pwease tell me :D
Code
The remote service accepts connections encrypted using SSL 2.0, which suffers from several cryptographic flaws and has been deprecated.* - Libyano - Apr 16, 2012
Yes. I'm studying SSL, encoding systems and such (the logical/mathematical way) it's really not that hard.
Use this book, it give you everything you need (it's the same book we use as a reference):
Computer Security Series
Security Technologies
For the World Wide Web
Second edition
~Rolf Oppliger.
* - Abdilo - Apr 16, 2012
(Apr 16, 2012 09:32 PM)Libyano Wrote: Yes. I'm studying SSL, encoding systems and such (the logical/mathematical way) it's really not that hard.Ok,
Use this book, it give you everything you need (it's the same book we use as a reference):
Computer Security Series
Security Technologies
For the World Wide Web
Second edition
~Rolf Oppliger.
So this is exploitable what can I do with it? can I steal stuff or upload stuff?
* - Libyano - Apr 16, 2012
(Apr 16, 2012 09:34 PM)Notavirus Wrote: Ok,
So this is exploitable what can I do with it? can I steal stuff or upload stuff?
Hi & sorry for the late reply, didn't notice it.
Yes once you crack it down you can manipulate it anyway you want. You can have total access to it. You can change what the user is viewing, etc.
Look at pages 128-141. And chapters 6 & 7.
* - Abdilo - Apr 16, 2012
(Apr 16, 2012 10:04 PM)Libyano Wrote: Hi & sorry for the late reply, didn't notice it.Fuck YEAH! 🤗 now I will have a shit load of emails, passwords, credit cards and more! 🤗
Yes once you crack it down you can manipulate it anyway you want. You can have total access to it. You can change what the user is viewing, etc.
Look at pages 128-141. And chapters 6 & 7.