返回资讯中心
外部精选
软件工程
#开发者实时流

Use TLS SNI to hide your servers (incl. Citrix) from IP-based mass exploitation

June 10, 2026 – Host header fuzzing stops at the HTTP layer and can’t find services hardened at the TLS handshake via SNI validation. SNItch fills that gap by fuzzing the SNI field directly – and doubles as a tool to ve…

Hacker News 最新flixf2026/10/27 · 昨天1 分钟阅读

这个来源的 RSS 只提供摘要,下面是原文导语;完整论述请点「打开原文」。

June 10, 2026 – Host header fuzzing stops at the HTTP layer and can’t find services hardened at the TLS handshake via SNI validation. SNItch fills that gap by fuzzing the SNI field directly – and doubles as a tool to verify your own servers don’t leak hostnames to IP-based reconnaissance.

Author: Felix Friedberger

本条为导读摘要,完整论述请以原文为准。

打开原文
去社区讨论 →