اسیب پذیری breach attack

[C0X]

سلام دوستان

چجوری میشه از اسیب پذیری breach attack استفاده کرد؟

[SafeMaster]

While CRIME was mitigated by disabling TLS/SPDY compression (and by modifying gzip to allow for explicit separation of compression contexts in SPDY), BREACH attacks HTTP responses. These are compressed using the common HTTP compression, which is much more common than TLS-level compression. This allows essentially the same attack demonstrated by Duong and Rizzo, but without relying on TLS-level compression (as they anticipated).

بهترین خروجی این آسیب پذیری sniff ssl هست .