What is needed?
Ubuntu / Kali Distro
sudo apt search testssl
Ubuntu : sudo snap install testssl
Python3 : pip3 install requests
If you need python3 packages use pip3 or pipx to install needed.
Some info , apple.com , facebook are still vurnerible to old ssl versions and exploits !!
To check facebook.com run the following command
testssl -U https://www.facebook.com/
To check apple.com run the following command
testssl -U https://www.apple.com/
Apple was owned in - 10 Oct 2024
Exploiting BREACH Attack (CVE-2013-3587) | How Apple.com Was Vulnerable
A example of this can be found here:
python3 apple-breach-poc.py
Facebook login portal
https://www.facebook.com/login/
BREACH (CVE-2013-3587)
python3 breach-tester.py https://www.facebook.com/login/
or
python3 breach-check1.py --verify https://www.facebook.com/login/
BEAST (CVE-2011-3389)
python3 beast-tester.py --verify www.facebook.com
Other mentions:
Black Hat USA 2013 - SSL, gone in 30 seconds - a BREACH beyond CRIME