SSL/TLS Vulnerability Cheat Sheet
Vulnerable SSL/TLS Versions: - SSLv2: Exposure and tampering in real-time, susceptible to MITM and Bleichenbacher '98 attack. - SSLv3: Decryption of data through BEAST and POODLE attacks. - TLSv1.0: Decryption of data through BEASTly attack. - DROWN: Decryption of data through key reuse across TLS versions. Vulnerable Cipher Suites: - NULL: Exposure and tampering in real-time.
FEATURES
ALTERNATIVES
A comprehensive guide to Python 3 syntax, features, and resources in a single image.
Coursera offers free online learning resources and courses during the COVID-19 pandemic.
An intentionally insecure Android app designed to teach developers and security professionals about common app vulnerabilities.
A comprehensive incident response and threat hunting tool for Google Cloud Platform, providing logs and forensic data for effective incident response and threat hunting.
Hacker wargames site with forums and tutorials, fostering a learning community.
A university course focused on vulnerability research, reverse engineering, and binary exploitation to teach practical offensive security skills.
Comprehensive reference guide for bug bounty hunters with detailed information on various vulnerabilities, platforms, tools, and best practices.
PINNED
Fabric Platform by BlackStork
Fabric Platform is a cybersecurity reporting solution that automates and standardizes report generation, offering a private-cloud platform, open-source tools, and community-supported templates.
Mandos Brief Newsletter
Stay ahead in cybersecurity. Get the week's top cybersecurity news and insights in 8 minutes or less.
Wiz
Wiz Cloud Security Platform is a cloud-native security platform that enables security, dev, and devops to work together in a self-service model, detecting and preventing cloud security threats in real-time.
Adversa AI
Adversa AI is a cybersecurity company that provides solutions for securing and hardening machine learning, artificial intelligence, and large language models against adversarial attacks, privacy issues, and safety incidents across various industries.