Top 10 winner

FREAK (Factoring Attack on RSA-Export Keys)

Zakir Durumeric, David Adrian, Ariana Mirian, Michael Bailey and J. Alex Halderman

FREAK lets a network attacker downgrade a TLS handshake to 512-bit export-grade RSA, factor that key cheaply, then decrypt or modify the HTTPS session. The site reports daily Internet-wide scans of vulnerable servers and clients, names affected Alexa top-10,000 domains, and offers test tools and remediation guidance.

Record

Researcher

Zakir Durumeric, David Adrian, Ariana Mirian, Michael Bailey and J. Alex Halderman

In the archive

• Ranked #1 in the 2015 Top 10 Web Hacking Techniques

Tags

• tls
• https
• cve
• large-scale-scan
• measurement-study
• mitigation
• detection
• owasp-a02-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Zakir Durumeric, David Adrian, Ariana Mirian, Michael Bailey and J. Alex Halderman, first published at the original source. Preserved copies are kept so the citation survives its host.