PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Why You Need IDontSpeakSSL in Your Life

bishopfox.com | blog | #network-security | #penetration-testing | #tls | #tool | #idontspeakssl | #testssl
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Why Bishop Fox built IDontSpeakSSL: a Python 3 wrapper that parallelizes testssl.sh scans and produces HTML reports of bad TLS configurations for large network pentests.
Published
Collected

Related coverage

blog · netspi.com
The Systems That Time Forgot
Forgotten test and legacy systems that escape asset management become easy entry points for attackers. The author outlines practical steps for discovery, inventory, and ownership.
blog · bishopfox.com
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
Bishop Fox shows how to bypass .NET MAUI's platform packaging to extract readable C# assemblies from Android and iOS apps, then use that shared-assembly insight to uncover critical vulnerability patterns in common business logic.
blog · bishopfox.com
Breaking HTTPS in the IoT: Practical Attacks For Reverse Engineers
Nathan Elendt shares three man-in-the-middle techniques for breaking HTTPS on production-grade IoT devices, starting with the default TLS hijacking attack that usually just works.
blog · bughunters.google.com
Certificate Error Mishandling: Misuse and Abuse of the SslErrorHandler Class
How Android developers misuse the WebView SslErrorHandler class when handling TLS certificate errors, why these mistakes create serious vulnerabilities, and how the class is meant to be implemented.
blog · bughunters.google.com
Why Hybrid Deployments Are Key to Secure PQC Migration
This blog post explores the advantages of hybrid deployments in a world of post-quantum cryptography, looks at the reasons behind our recommendation, and offers implementation guidance.
blog · blog.quarkslab.com
Overview of Passive Optical Networks (PONs) Security
Passive Optical Networks (PONs) connect end-users to infrastructure using optical fibre in the last kilometre (Fibre-to-the-x). This article provides a technical overview of the security features in ITU-T specifications: Gigabit-capable PON (GPON), 10-Gigabit-capable PON (XG-PON), 10-Gigabit-capable Symmetric PON (XGS-PON), Next-generation PON 2 (NG-PON2), and 50-Gigabit-capable PON (50G-PON). The analysis covers authentication schemes, key derivation, encryption methods, and associated security implications.
Back