H1-111752 — Vulnetix

H1-111752 PUBLISHED

Big Bug in SSL : breach compression attack (CVE-2013-3587) affect imgur.com

Exploit Intelligence

Big Bug in SSL : breach compression attack (CVE-2013-3587) affect imgur.com (hackerone)
Big Bug in SSL : breach compression attack (CVE-2013-3587) affect imgur.com (hackerone)
Performs a testssl.sh test on SSL/TLS port and displays tool output. (nmap-nse)
Attempts to partially detect the BREACH HTTP compression vulnerability (CVE-2013-3587). The script can only confirm if an HTTPS request successfully completes with a Referer header and that the response uses HTTP compression (gzip, DEFLATE). However, details for additional vulnerability confirmation are provided in the vuln description output. References: * http://www.breachattack.com/ * https://blog.qualys.com/ssllabs/2013/08/07/defending-against-the-breach-attack (nmap-nse)
Attempts to partially detect the BREACH HTTP compression vulnerability (CVE-2013-3587). The script can only confirm if an HTTPS request successfully completes with a Referer header and that the response uses HTTP compression (gzip, DEFLATE). However, details for additional vulnerability confirmation are provided in the vuln description output. References: * http://www.breachattack.com/ * https://blog.qualys.com/ssllabs/2013/08/07/defending-against-the-breach-attack * https://blog.cloudflare.c... (nmap-nse)