Support Center

Go to Crashtest Security Website

SSL / TLS Vulnerabilities

User Guides Crashtest Security Suite
About OWASP Top 10
Fingerprinting
SSL / TLS Vulnerabilities
Injection Attacks
Broken Authentication & Session Management
XML External Entity (XXE) Processing
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Deserialization
Fuzzer
Insecure Network Services

Back to home

Support Center

SSL / TLS Vulnerabilities

User Guides Crashtest Security Suite
About OWASP Top 10
Fingerprinting
SSL / TLS Vulnerabilities
Injection Attacks
Broken Authentication & Session Management
XML External Entity (XXE) Processing
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)
Deserialization
Fuzzer
Insecure Network Services

SSL / TLS Vulnerabilities

Vulnerabilities requiring reconfiguration

Harden TLS Session Resumption
Certificate Revocation
Configure Trusted Certificates
Enable HSTS
Enable missing SSL CAA record
Enable Secure Cookies
Secure TLS Configuration
Renew TLS Certificates
Prevent SSL LUCKY13
Prevent SSL CRIME
Prevent SSL BREACH
Enable TLS Encryption
Enable Perfect Forward Secrecy
Increase TLS Key Size
Disable deprecated SSL Protocol Versions
Configure SSL Cipher Order
Manage TLS Warning
Enable Security Headers

Specific certificate vulnerabilities

Disable SSL RC4
Disable SSL Insecure Algorithm
Prevent Ticketbleed
Prevent SSL DROWN
Prevent SSL SWEET32
Prevent SSL ROBOT
Prevent SSL LOGJAM
Prevent SSL POODLE
Prevent SSL FREAK
Prevent SSL BEAST

Mitigated in latest versions

Enable TLS_FALLBACK_SCSV
Secure SSL Renegotiation
Prevent CCS Injection
Prevent Heartbleed
Secure Client-Initiated SSL Renegotiation

Crashtest Security GmbH Wiki

Go to Crashtest Security Website