Skip to content

Releases: tls-attacker/TLS-Attacker

TLS-Attacker 3.4.0

20 Jan 14:43
32c5bcb

Choose a tag to compare

-improved invalid curve attacker (now also with twist support)
-certificate delegate now also supports .pem files
-fixed some bugs

TLS-Attacker 3.3.1

11 Nov 17:12
1e4187b

Choose a tag to compare

Fixed a NullPointerException in the InvalidCurveAttacker
Fixed a Bug which affects the BouncyCastleProviderChecker in some ClassLoader setups

TLS-Attacker 3.3.0

07 Nov 16:54
b4642c8

Choose a tag to compare

  • Bug fixes
  • New versioning scheme

TLS-Attacker 3.2

04 Sep 15:18
fcac445

Choose a tag to compare

Contains only a minor "bug" fix in the HeartbleedAttacker to make it work dynamically, even if the default ciphersuite is not supported by the server

TLS-Attacker 3.1

15 Aug 16:47
538a98e

Choose a tag to compare

Bug fix released.
-temporary fix of montgomery curve unsupported operation exception
-fix for explicit sni setting

TLS-Attacker 3.0

09 Jul 16:10
4066911

Choose a tag to compare

DTLS 1.0 and DTLS 1.2 support (Thanks to Paul Fiterau Brostean)
TLS ECCPWD Support (Dragonfly) (Thanks to Alexander Freiherr von Buddenbrock)
Integration of new EC Library:
-TLS-Attacker now supports computations on invalid curve points out of the box
-All non ECDSA code is now more streamlined
All standardized elliptic curves are now functional (ECDSA excluded)
Support for CCM_8 ciphersuites
Cleaner Client API (ConnectionDelegate)
Removed HostnameDelegate
Removed a lot of legacy code which was not used anymore
Fixed a bug which prevented Camellia GCM to not work properly
Server DHE PublicKey now gets correctly computed at runtime
ServerTcpTransportHandler now correctly handles Timeouts
Fixed selection of parameters server side on various locations
KeyShareExtension in Draft versions now works better
Fixed an off by one error in nearly empty WorkflowTraces when look at them with the WorkflowTraceUtil
Unicode Domains are now supported
SNI is now handled better by the client delegate
RSA PMS ProtocolVersion is now a modifiableVariable and can be modified more easily
WorkflowExecutor now throws an exception if BouncyCastle is not loaded at runtime
Fixed a bug in the parsing of long server hello lenght fields
Fixed a bug in the extraction of Fingerprints in the BleichenbacherAttack

Lots of smaller fixes

TLS-Attacker 2.9

11 May 18:00
2b540ac

Choose a tag to compare

-various regressions fixted (mostly STARTTLS)
-bug fixes

TLS-Attacker 2.8

01 Mar 15:30
0a176ae

Choose a tag to compare

TLS-Attacker 2.8 Pre-release
Pre-release

-Bug fix in Attacks.jar
-TLS 1.3 fix
-Attribution preparations

TLS-Attacker 2.7

21 Feb 21:38
3c772c6

Choose a tag to compare

-ChachaPoly support - thanks @rflume
-TLS-Compression - thanks @columbkh
-Reworked Lucky13 - thanks @malt3
-Bug fixes

TLS-Attacker 2.6

26 Sep 10:05
626a7ee

Choose a tag to compare

-Better support for parallel executions
-GOST support
-Various Bugfixes
-A lot of refactoring
-TLS 1.3 (RFC) support
-Automatic certificate selection (server)
-Better PaddingOracle detection / more sophisticated strategies
-Better logging