Cатсн²² (in)sесuяitу / ChrisJohnRiley

Because we're damned if we do, and we're damned if we don't!

Tag Archives: HTTPS

SSL certificate impersonation… for shits and giggles!

7 Comments Posted by on September 4, 2011

Cultural Note: Shits and giggles == englishize(for the lulz) –> Urban Dictionary Ref. How often as penetration testers do we see SSL protected services using self signed certificates… If you’re anything like the average penetration tester, it’s probably daily. We’ve all been through the song and dance of documenting it, saying it’s bad and that [...]

Metasploit, Penetration Test, Security , ,

HTTP Strict Transport Security

Leave a Comment Posted by on August 27, 2010

If you’re a sad geek like me you’ve probably already heard of HSTS (HTTP Strict Transport Security). HSTS is designed to solve an issue where you access a web server using HTTP and are automatically redirected to the HTTPS equivalent (usually through a 301 or 302 response and a new location header). To most this seems [...]

Security, Technology , , , ,

Follow

Get every new post delivered to your Inbox.