+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Possible to hack a positive SSL secured website? (/showthread.php?tid=4989450)
Possible to hack a positive SSL secured website? - Malwhere? - Sep 16, 2015
I have little to zilch experience in website hacking, but I just have a simple question..
Is it possible to hack into a positive SSL secured website? Secured by Comodo.
Does that make any difference at all even?
Sorry for the stupid question.
* - duane - Sep 16, 2015
Yes, I believe Comodo had heartbleed sometime last year, what version are you interested in?
* - Mircale - Sep 16, 2015
Yea totally possible this just encrypt the connection but wouldn't help if the script or server have exploits.
* - Abdilo - Sep 17, 2015
Jesus christ you remind of a btc wallet provider who said: "XSS DONT WORK ON MY SITE BECAUSE I HAVE SSL".
SSL dont mean shit, SSL is to help stop MITM attacks(by encrypting the data going between you and the site) not to protect the actual site/box.
* - The Fire - Sep 17, 2015
SSL Wont do anything if someone gets admin login/ftp access.
* - ๖ۣۜSyria - Sep 17, 2015
It just encrypts data. I have sql injected many ssl sites
* - -zERAiT - Sep 17, 2015
SSL (Secure Sockets Layer) is a standard security technology for establishing an encrypted link between a server and a client—typically a web server (website) and a browser; or a mail server and a mail client (e.g., Outlook).
SSL allows sensitive information such as credit card numbers, social security numbers, and login credentials to be transmitted securely. Normally, data sent between browsers and web servers is sent in plain text—leaving you vulnerable to eavesdropping. If an attacker is able to intercept all data being sent between a browser and a web server they can see and use that information.
More specifically, SSL is a security protocol. Protocols describe how algorithms should be used; in this case, the SSL protocol determines variables of the encryption for both the link and the data being transmitted.
Source: https://www.digicert.com/ssl.htm