Hack Forums
Help Request - SSL Strip - CRIME(SPDY) Vulnerability - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: Help Request - SSL Strip - CRIME(SPDY) Vulnerability (/showthread.php?tid=5757615)



Help Request - SSL Strip - CRIME(SPDY) Vulnerability - Juni0rNoob - Nov 24, 2017

So I was just playing around with the A2SV tool and found a website which when I scanned, it gave me back this in terminal:
CRIME(SPDY)      CVE-2012-4929 AV:N/AC:H/Au:N/C:P/I:N/A:N Vulnerable!
I was wondering if anyone knew a bit more about the vulnerability as I've never heard of it before and couldn't find any videos explaining it and the articles I found didn't go too in depth so I came here. I basically just want to know what it is, how it is exploited and the way to get round it if there is one really
Thanks in advance


RE: Help Request - SSL Strip - CRIME(SPDY) Vulnerability - CyberStrike - Nov 25, 2017

https://cve.mitre[.]org/cgi-bin/cvename.cgi?name=cve-2012-4929 that should give you bit more of a direction in which to go.


RE: Help Request - SSL Strip - CRIME(SPDY) Vulnerability - Juni0rNoob - Nov 25, 2017

(Nov 25, 2017 05:18 AM)sirru5h Wrote:  http s://cve.mitre[.]org/cgi-bin/cvename.cgi?name=cve-2012-4929 that should give you bit more of a direction in which to go.

Thanks for the help


RE: Help Request - SSL Strip - CRIME(SPDY) Vulnerability - AceHardware - Nov 25, 2017

Cool i can really use this information.