Conversation

Notices

1. Embed this notice
   Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Wednesday, 24-Jul-2024 18:16:18 JST Ryan Castellucci :nonbinary_flag:

   I am again contemplating writing a tool that fragments the TLS Client Hello message in the middle of the Server Name Indication extension and see what happens.

   I bet a lot of shit will break.

   • Embed this notice
     Merospit (merospit@infosec.exchange)'s status on Wednesday, 24-Jul-2024 18:43:20 JST Merospit

     in reply to

     @ryanc Fragmentation is an underrated technique for protocol testing.

   • Embed this notice
     Bernard Quatermass (quatermasstools@infosec.exchange)'s status on Wednesday, 24-Jul-2024 22:37:43 JST Bernard Quatermass

     in reply to

     @ryanc Do It