In cooperation with the university Paderborn and Münster University of Applied Sciences, we discovered a new flaw in the specification of TLS. The vulnerability is called ALPACA and exploits a weakness in the authentication of TLS for cross-protocol attacks. The attack allows an attacker to steal cookies or perform cross-site-scripting (XSS) if the specific conditions for the attack are met.
TLS is an internet standard to secure the communication between servers and clients on the internet, for example that of web servers, FTP servers, and Email servers. This is possible because TLS was designed to be application layer independent, which allows its use in many diverse communication protocols.
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. Attackers can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
We investigate cross-protocol attacks on TLS in general and conducted a systematic case study on web servers, redirecting HTTPS requests from a victim's web browser to SMTP, IMAP, POP3, and FTP servers. We show that in realistic scenarios, the attacker can extract session cookies and other private user data or execute arbitrary JavaScript in the context of the vulnerable web server, therefore bypassing TLS and web application security.
We evaluated the real-world attack surface of web browsers and widely-deployed Email and FTP servers in lab experiments and with internet-wide scans. We find that 1.4M web servers are generally vulnerable to cross-protocol attacks, i.e., TLS application data confusion is possible. Of these, 114k web servers can be attacked using an exploitable application server. As a countermeasure, we propose the use of the Application Layer Protocol Negotiation (ALPN) and Server Name Indication (SNI) extensions in TLS to prevent these and other cross-protocol attacks.
Although this vulnerability is very situational and can be challenging to exploit, there are some configurations that are exploitable even by a pure web attacker. Furthermore, we could only analyze a limited number of protocols, and other attack scenarios may exist. Thus, we advise that administrators review their deployments and that application developers (client and server) implement countermeasures proactively for all protocols.
More information on ALPACA can be found on the website https://alpaca-attack.com/.
Related word
- Wifi Hacker Tools For Windows
- Hacker Tool Kit
- Hacker Tools Online
- Termux Hacking Tools 2019
- Hacker Tools Online
- Beginner Hacker Tools
- Pentest Tools
- Hacker Tools For Mac
- Pentest Tools Subdomain
- Hacking Apps
- Hacking Tools Free Download
- Hacker
- Hacking Tools Download
- Hack Tools For Mac
- Hacking Tools Kit
- Hak5 Tools
- Pentest Tools Find Subdomains
- Pentest Tools Apk
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Alternative
- Hacking Tools And Software
- Hack Tools Online
- Hacker Tools 2020
- Pentest Recon Tools
- Pentest Tools For Windows
- Hacking Tools For Beginners
- Hacker Tools Linux
- Pentest Tools Linux
- Pentest Tools Windows
- Hacking Tools Windows
- World No 1 Hacker Software
- Black Hat Hacker Tools
- Pentest Tools Framework
- Hacking Tools Kit
- Pentest Tools Online
- Hacker Tools 2020
- Hacker Hardware Tools
- Hack Tools Online
- Hack Tools Mac
- Hacking Tools And Software
- Hacking Tools
- Pentest Tools For Windows
- Hack Tools Online
- Hackers Toolbox
- Pentest Automation Tools
- Blackhat Hacker Tools
- Hacking Tools Software
- Hacking Tools For Pc
- Install Pentest Tools Ubuntu
- Tools Used For Hacking
- Github Hacking Tools
- Hack Apps
- Hacking Tools Online
- Hacker Tools Linux
- Pentest Tools For Mac
- Hacking Tools Pc
- Hacking Tools For Windows Free Download
- Beginner Hacker Tools
- Hacker Tools For Mac
- Best Pentesting Tools 2018
- Hack And Tools
- Hacking Tools Software
- Pentest Tools For Windows
- Hacking Tools Free Download
- Hacking Tools And Software
- World No 1 Hacker Software
- Hack Tools Download
- Best Pentesting Tools 2018
- Hack Tools Github
- Hacker Tools For Pc
- Hack Tool Apk
- Hacking Tools For Mac
- Hacking Tools Mac
- Hacking Tools 2019
- Hacking Tools Kit
- Wifi Hacker Tools For Windows
- Hack Tool Apk No Root
- Pentest Tools Windows
- Hacking Tools For Kali Linux
- Pentest Tools For Android
- Nsa Hacker Tools
- Hack Apps
- Hacking Tools Kit
- Hacker Tools Software
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Online
- Hacking Tools Free Download
- Hacker Hardware Tools
- Hackrf Tools
- Pentest Tools Url Fuzzer
- Hacker Tools
- Free Pentest Tools For Windows
- Hacking Tools For Mac
- Hacker Tools List
- Pentest Tools For Android
- What Is Hacking Tools
- Beginner Hacker Tools
- Hacker Tools Apk
- Nsa Hack Tools Download
- Best Hacking Tools 2020
- Pentest Tools
- Hacking Tools For Windows Free Download
- Pentest Tools Github
- Github Hacking Tools
- Pentest Tools Nmap
- Pentest Tools Alternative
- Hack Website Online Tool
- Hacker
- Hack Tools For Windows
- Pentest Tools Windows
- Pentest Box Tools Download
- Hacking Tools Download
- Pentest Tools Linux
- Termux Hacking Tools 2019
- Kik Hack Tools
- Pentest Reporting Tools
- Hacking Tools Free Download
- Hack Tools Online
- Hack Tools
- Hacking Tools Pc
- Hacking Tools For Beginners
- Hacker
- Hacks And Tools
- Hacking Tools Mac
- Hack Tools Github
- Hacker Tools Free
- Hacker Tools Mac
- Top Pentest Tools
- Hack Rom Tools
- Hacker Tools For Ios
- Hacker Hardware Tools
- Hacking App
- Pentest Tools Framework
- World No 1 Hacker Software
- Hacker Tools Linux
- Easy Hack Tools
- Pentest Tools For Ubuntu
- What Are Hacking Tools
- Tools For Hacker
- Hacking Tools Free Download
- Nsa Hack Tools
- Pentest Automation Tools
- Hacker Tools For Ios
- Install Pentest Tools Ubuntu
- Hacker Tools Github
- Easy Hack Tools
- Underground Hacker Sites
- Pentest Automation Tools
- New Hacker Tools
- Hacking Tools For Pc
No comments:
Post a Comment