Drown Attack (CVE-2016-0800)

Ingin mengenal Drown Attack (CVE-2016-0800):

https://drownattack.com/
https://web.nvd.nist.gov/view/vuln/detail…

Contoh situs populer yg pernah terdampak Drown
https://drownattack.com/top-sites.html

Test Drown Vulnerability
https://drownattack.com/#check

Test secara manual :
1. nmap
nmap -sV -sC [IP]

2. SSLyze
sslyze --sslv2 [IP]

3. SSLScan
sslscan --no-failed [IP]

4- openSSL
openssl s_client -no_tls1 -no_ssl3 -connect [IP]

Atau Test SSL Anda dengan :
https://www.ssllabs.com/ssltest/

Github :
https://github.com/nimia/public_drown_scanner

Selamat belajar dan mencoba.