Skip to content

Show HN: VulnTLS a TLS server that can be hacked

github.com/otsmr
3 pointstsmrdiscuss
On HN

VulnTLS is currently a small set of TLS vulnerabilities that can be exploited to learn. Most of the vulnerabilities were already present in common TLS implementations. VulnTLS is based on AnotherTLS, a TLS implementation that I implemented from scratch for this purpose (see in the README).

Currently there are only three: - Psychic signatures: Bypass the client certificate authentication! - Timing issues: Get the private key of the server! - Dual_EC: Decrypt the captured connection!

Comments

No comments yet.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.