In cooperation with the university Paderborn and Münster University of Applied Sciences, we discovered a new flaw in the specification of TLS. The vulnerability is called ALPACA and exploits a weakness in the authentication of TLS for cross-protocol attacks. The attack allows an attacker to steal cookies or perform cross-site-scripting (XSS) if the specific conditions for the attack are met.
TLS is an internet standard to secure the communication between servers and clients on the internet, for example that of web servers, FTP servers, and Email servers. This is possible because TLS was designed to be application layer independent, which allows its use in many diverse communication protocols.
ALPACA is an application layer protocol content confusion attack, exploiting TLS servers implementing different protocols but using compatible certificates, such as multi-domain or wildcard certificates. Attackers can redirect traffic from one subdomain to another, resulting in a valid TLS session. This breaks the authentication of TLS and cross-protocol attacks may be possible where the behavior of one protocol service may compromise the other at the application layer.
We investigate cross-protocol attacks on TLS in general and conducted a systematic case study on web servers, redirecting HTTPS requests from a victim's web browser to SMTP, IMAP, POP3, and FTP servers. We show that in realistic scenarios, the attacker can extract session cookies and other private user data or execute arbitrary JavaScript in the context of the vulnerable web server, therefore bypassing TLS and web application security.
We evaluated the real-world attack surface of web browsers and widely-deployed Email and FTP servers in lab experiments and with internet-wide scans. We find that 1.4M web servers are generally vulnerable to cross-protocol attacks, i.e., TLS application data confusion is possible. Of these, 114k web servers can be attacked using an exploitable application server. As a countermeasure, we propose the use of the Application Layer Protocol Negotiation (ALPN) and Server Name Indication (SNI) extensions in TLS to prevent these and other cross-protocol attacks.
Although this vulnerability is very situational and can be challenging to exploit, there are some configurations that are exploitable even by a pure web attacker. Furthermore, we could only analyze a limited number of protocols, and other attack scenarios may exist. Thus, we advise that administrators review their deployments and that application developers (client and server) implement countermeasures proactively for all protocols.
More information on ALPACA can be found on the website https://alpaca-attack.com/.
Read more
- How To Hack
- Hacker Tools Apk
- Hacker Tools Online
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Alternative
- Hack Tool Apk
- New Hack Tools
- Hacker Tools For Pc
- Hacker Tools 2020
- Tools 4 Hack
- Hacking Tools For Kali Linux
- Pentest Tools Linux
- Hacker Tools Apk
- Hacker Security Tools
- Pentest Tools Website Vulnerability
- Hacker Tools 2020
- Easy Hack Tools
- Hacking Tools Mac
- Wifi Hacker Tools For Windows
- Pentest Tools Open Source
- Bluetooth Hacking Tools Kali
- Hacker Security Tools
- Pentest Tools Online
- Blackhat Hacker Tools
- Pentest Tools For Android
- Hack Tool Apk No Root
- Best Hacking Tools 2020
- Hack Tools
- Pentest Tools Website
- Hacking Tools Windows
- Hacker Tools Hardware
- Pentest Tools
- Kik Hack Tools
- Hacking Tools Windows
- Pentest Tools For Windows
- Hacking Tools For Pc
- Hack Tools
- Hacking Tools For Windows
- Pentest Tools Nmap
- Hacker Tools Free
- Hack Tools Github
- Best Pentesting Tools 2018
- Hacker Tools 2020
- Wifi Hacker Tools For Windows
- Growth Hacker Tools
- Hack Tool Apk
- Hack App
- Hak5 Tools
- Hacker Hardware Tools
- Tools For Hacker
- How To Install Pentest Tools In Ubuntu
- Hacker Tools 2019
- Pentest Tools Subdomain
- Nsa Hack Tools
- Hacker Search Tools
- Hack Tools
- Pentest Tools Free
- How To Make Hacking Tools
- Hacker Tools Apk
- Wifi Hacker Tools For Windows
- Hack Tools For Pc
- Pentest Tools Windows
- Hacking Tools Kit
- Hacking Tools Windows 10
- Ethical Hacker Tools
- Hacking Tools For Windows
- Hacker
- Hacking Tools For Games
- Pentest Tools Website Vulnerability
- Hacker Tools Windows
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Free
- Usb Pentest Tools
- Hacker Tools
- Bluetooth Hacking Tools Kali
- Pentest Tools For Windows
- What Are Hacking Tools
- Pentest Tools Url Fuzzer
- Hack Rom Tools
- Hack Tool Apk No Root
- Black Hat Hacker Tools
- Hack Tools Pc
- Hack Tools For Mac
- Hack Tools Pc
- World No 1 Hacker Software
- Tools For Hacker
- Usb Pentest Tools
- Hacking Tools Online
- Hacking Tools Windows
- Hacking Tools For Mac
- Hack Website Online Tool
- Hacking Tools For Windows
- Hacking Tools Software
- Hacking Tools Usb
- Pentest Tools Website
- Hacker Tools Free
- Hack Tools Mac
- Pentest Recon Tools
- Top Pentest Tools
- Hack Tools For Pc
- Termux Hacking Tools 2019
- Github Hacking Tools
- Pentest Tools Tcp Port Scanner
- Hacking Tools Free Download
- Hacking Tools
- Pentest Tools Windows
- Hack Website Online Tool
- Hacking Tools For Games
- Hacker Tools Free Download
- Hacking Tools Kit
- Hack Tools Download
- Usb Pentest Tools
- Hacker Tools 2020
- Hacker Tools For Pc
- Hacking Tools For Mac
- How To Make Hacking Tools
- Underground Hacker Sites
- Best Pentesting Tools 2018
- Pentest Tools Apk
- Top Pentest Tools
- Hacking Tools 2019
- Hacking Tools For Kali Linux
- Hacking Tools For Beginners
- Hacker Tools For Ios
- Pentest Tools Nmap
- Hacking Tools For Windows
- Hacker Tools 2020
- Hack And Tools
- Hacking Tools For Beginners
- Blackhat Hacker Tools
- Hack Tools Pc
- Hacking Tools For Mac
- Hacking Tools For Mac
- Best Pentesting Tools 2018
- Hacking Tools Free Download
- Github Hacking Tools
- Hack Tools Pc
- Hacking Tools For Pc
- Hacking Tools 2020
- Hacker Security Tools
- Hacking App
- Hacking Tools For Pc
- Hacker
- Computer Hacker
- Pentest Box Tools Download
- Beginner Hacker Tools
- Hacking Tools For Mac
- Pentest Tools List
- Physical Pentest Tools
- Hacker Tools For Pc
- Best Hacking Tools 2019
- Hacking Tools 2019
- Top Pentest Tools
- Hacker Tools Apk
- Nsa Hack Tools Download
- Nsa Hack Tools Download
- Hack Tools For Pc
- Pentest Tools Url Fuzzer
- Hacking Tools Download
- Game Hacking
- Hacking Tools Windows
- Tools 4 Hack
- Nsa Hacker Tools
- Hacker Tools Online