HexBrain

X / xAI · Report #29206

Twitter Flight SSL 2.0 deprecated protocol vulnerability.

Validstatus
1upvotes
7 Oct 2014disclosed

How it was found

Twitterflight.com (From Twitter Inc..I just checked it with whois) Website service encrypts traffic using an old deprecated protocol with known weakness wich is obsolete and insecure, you should disable it.

POC in the attachments.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original