CVE-2014-0224 SSL/TLS中间人攻击漏洞(CCS注入)之NMAP大法

a. 在线检测

https://myssl.com/ccs.html
https://myssl.com/ccs.html?domain=shanghai.swmc.org.cn&port=443

https://www.ssllabs.com/ssltest/index.html
https://www.ssllabs.com/ssltest/analyze.html?d=shanghai.swmc.org.cn

测试检测站
http://www.yuxianxx.fxedu.cn

 

 

b. Nmap

nmap --script ssl-ccs-injection targetdomain.com -p443


nmap --script ssl-ccs-injection www.yuxianxx.fxedu.cn -p443