Ingin mengenal Drown Attack (CVE-2016-0800):
https://drownattack.com/
https://web.nvd.nist.gov/view/vuln/detail…
Contoh situs populer yg pernah terdampak Drown
https://drownattack.com/top-sites.html
Test Drown Vulnerability
https://drownattack.com/#check
Test secara manual :
1. nmap
nmap -sV -sC [IP]
2. SSLyze
sslyze --sslv2 [IP]
3. SSLScan
sslscan --no-failed [IP]
4- openSSL
openssl s_client -no_tls1 -no_ssl3 -connect [IP]
Atau Test SSL Anda dengan :
https://www.ssllabs.com/ssltest/
Github :
https://github.com/nimia/public_drown_scanner
Selamat belajar dan mencoba.