Cheatsheet Summary
Learn how to use sslscan to identify weak encryption configurations, deprecated SSL/TLS protocols, and potential security issues during web security assessments.
sslscan is a powerful security tool designed to identify the encryption protocols, algorithms, hash types, and SSL/TLS certificates supported by a server. It plays a crucial role in assessing the security posture of web applications and services.
In Bug Bounty programs, while a TLS misconfiguration may not always be classified as a critical vulnerability, it can serve as a gateway for various security issues, including:
misesop375Bypassing Cloudflare WAF during security assessments involves handling headers, TLS fingerprinting, IP reputation, and JS challenges; however, the most effective approach is IP whitelisting, with tools like mitmproxy and custom TLS setups covering most remaining cases.
heroxo9868Claude is effective at automated discovery and structured testing, but has notable blind spots; its ability to recognize what it missed adds value.
heroxo9868A collection of bug bounty and security testing resources covering common web vulnerabilities, exploitation techniques, reconnaissance methods, and security tools. It includes guides, real-world write-ups, checklists, and tools for testing issues like XSS, SQL injection, SSRF, file uploads, authentication bypasses, cloud misconfigurations, and subdomain enumeration.
No comments yet.
Be the first to share your thoughts
Log in to join the discussion.
Sign In