Scribd Logo
Importer

Bienvenue sur Scribd !

  • TLS SSLv3 Man in The Middle (Mitm) Vulnerability

    Transféré par

    thierryzoller
    4K vues4 pages
    TLS SSLv3 man in the middle (mitm) vulnerability

    Titre original

    TLS SSLv3 man in the middle (mitm) vulnerability

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Formats disponibles

    PDF, TXT ou lisez en ligne sur Scribd

    Avez-vous trouvé ce document utile ?

    Ce contenu est-il inapproprié ?

    Signaler ce document
    TLS SSLv3 man in the middle (mitm) vulnerability

    Droits d'auteur :

    Attribution Non-Commercial (BY-NC)
    Téléchargez comme PDF, TXT ou lisez en ligne sur Scribd
    Signaler comme contenu inapproprié
    4K vues4 pages

    TLS SSLv3 Man in The Middle (Mitm) Vulnerability

    Transféré par

    thierryzoller
    TLS SSLv3 man in the middle (mitm) vulnerability

    Droits d'auteur :

    Attribution Non-Commercial (BY-NC)
    Téléchargez comme PDF, TXT ou lisez en ligne sur Scribd
    Signaler comme contenu inapproprié
    sur 4

    basic TLS handshake

    client hello

    server hello
    certificate
    server hello done

    client key exchange


    change cipher spec
    finished

    change cipher spec


    finished

    GET /secure HTTP/1.1\r\n...


    TLS handshake with client cert
    (ideal)
    client hello

    server hello
    certificate
    certificate request
    server hello done

    certificate
    client key exchange
    certificate verify
    change cipher spec
    finished

    change cipher spec


    finished

    GET /secure HTTP/1.1

    HTTP/1.1 OK
    TLS handshake with client cert (typical)
    c s
    client hello

    server hello
    certificate
    server hello done

    client key exchange


    change cipher spec
    finished

    change cipher spec


    finished

    GET /secure HTTP/1.1

    hello request
    server-initiated
    renegotiation client hello

    server hello
    certificate
    certificate request
    server hello done

    certificate
    client key exchange
    certificate verify
    change cipher spec
    finished

    change cipher spec


    finished
    HTTP/1.1 OK
    TLS handshake with client cert - mitm remix
    c m s
    client hello
    client hello

    server hello
    certificate
    server hello done

    client key exchange


    change cipher spec
    finished

    change cipher spec


    finished

    POST /secure/evil.html HTTP/1.1

    server-initiated renegotiation hello request

    replay client hello

    server hello server hello


    certificate certificate
    certificate request certificate request
    server hello done server hello done

    certificate certificate
    client key exchange client key exchange
    certificate verify certificate verify
    change cipher spec change cipher spec
    finished

    change cipher spec change cipher spec


    finished

    HTTP/1.1 OK

    GET /secure HTTP/1.1

    Vous aimerez peut-être aussi