'ssl' 검색 결과

Audit TLS/SSL, the technology that encrypts network connections, across servers and mobile apps. The skill covers outdated protocols, weak encryption, certificate validation failures, known vulnerabilities, and replay risks, helping organize evidence and prioritize fixes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing server protocols, encryption settings, and certificates
• Reviewing certificate validation in mobile apps
• Assessing TLS 1.3 replay risks and mutual authentication

Configure TLS 1.3, a protocol for encrypted connections, on nginx, Apache, and Python applications. Select encryption settings and key exchange groups, disable outdated protocols, and use openssl s_client and testssl.sh to check connections and configuration weaknesses.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Enabling TLS 1.3 on nginx or Apache
• Configuring encrypted connections in a Python application
• Disabling outdated TLS versions and weak encryption

Investigate subdomains, SSL certificates, domain registration details, and DNS records with a Python helper. Run checks across multiple domains, estimate registration availability, and receive structured JSON results without additional packages or API keys.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Finding subdomains in certificate logs
• Checking SSL certificate expiry
• Inspecting domain registration and DNS records

Troubleshoot access to government and institutional websites by checking connectivity, SSL certificates, and proxy settings. Follow a structured process to test request options, configure retries, and identify alternative data sources when access fails.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating SSL certificate errors
• Comparing browser and script connectivity
• Checking proxy authentication failures

Use this skill when wiring the DOCA SHA Offload Engine (an OpenSSL ENGINE) into an existing OpenSSL pipeline to offload one-shot SHA-1, SHA-256, or SHA-512 (EVP_Digest) onto DOCA SHA hardware without rewriting against doca-sha. Covers engine load mechanics (`openssl engine dynamic`, `set_pci_addr` ctrl, `-engine_impl`), the SHA-224 negative test that proves offload engaged, the message-size window where offload beats CPU SHA, and engine-vs-library selection. Trigger even when the user does not say "DOCA SHA Offload Engine" or "OpenSSL ENGINE" — typical implicit phrasings: "speed up openssl SHA on BlueField", "offload SHA without code changes", "is openssl using the accelerator or falling back to software", "prove DOCA SHA actually ran", "openssl dgst hashed but I'm not sure it was offloaded". Refuse and route elsewhere for new SHA pipelines (use doca-sha), MD5 / SHA-3 / SHA-224 / HMAC-SHA offload, incremental hashing via chained `EVP_DigestUpdate`, or OpenSSL PROVIDER authoring.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Build a two-tier certificate authority with OpenSSL and Python, separating the offline root from the issuing authority. Covers server and client certificates, revocation checks, and policies that define certificate usage and trust.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Set up an internal certificate authority
• Issue server and client certificates
• Configure certificate revocation checks

Diagnose failed connections to government websites and corporate portals by checking network access, SSL certificates, and proxy settings. If access remains unavailable, the workflow helps identify alternative data sources and document attempts and next steps.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Investigating SSL certificate errors
• Checking connections through a corporate proxy
• Finding alternative sources for inaccessible data

TLS/SSL configuration audit. Tests protocol versions (SSLv2/3, TLS 1.0/1.1/1.2/1.3), cipher strength and ordering, certificate chain validation (intermediates, CT logs, OCSP stapling, pinning), known vulnerabilities (POODLE, BEAST, CRIME, Heartbleed, ROBOT, DROWN, Ticketbleed, GOLDENDOODLE), session management (ticket reuse, resumption, fixation), renegotiation attacks, TLS 1.3-specific issues (0-RTT replay, PSK modes, downgrade), HSTS deep analysis (preload, subdomains, bypass), and certificate revocation (CRL, OCSP responder, stapled response freshness). Compliance-mapped to PCI DSS 4.0 (full Section 4), NIST SP 800-52r2, and FedRAMP. Uses testssl.sh, sslscan, sslyze, openssl, nmap NSE scripts, and nuclei SSL templates. Multi-port scanning across 20+ TLS-bearing services.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Inspect and manage Tencent Cloud resources with tccli, its command line tool. Covers servers, networking, DNS, certificates, permissions, monitoring, and application deployment, with supporting scripts for login and identifying the current cloud instance.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Checking Lighthouse and CVM server status
• Reviewing domain expiry dates and SSL certificates
• Inspecting security groups and access permissions

Write and review asynchronous C++ networking code using Boost.Asio or standalone Asio. The skill selects an implementation style for the installed library and C++ version, then checks memory lifetimes, concurrent writes, error handling, and build settings.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Implementing asynchronous TCP or UDP servers and clients
• Reviewing buffer lifetimes and concurrent socket writes
• Adapting networking code to older Boost and C++ versions

Diagnose connection problems with government websites by checking SSL certificates, which verify website identity, and proxy settings. Follow structured troubleshooting steps, record failed attempts, and explore alternative APIs or data sources when access remains blocked.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Diagnosing certificate errors on government websites
• Checking whether proxy settings block data access
• Finding alternative sources for inaccessible public data

Analyze Android and iOS apps through package inspection, code analysis, runtime observation, and network traffic review. Support authorized security testing of embedded secrets, certificate checks, device protection checks, and cryptographic behavior.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Inspecting APK or IPA permissions and configuration
• Checking code for embedded keys and tokens
• Observing app behavior with Frida or Objection

Detect single-nucleotide crosslink (CL) sites in CLIP-seq data using truncation patterns (iCLIP/eCLIP CITS), crosslink-induced mutations (HITS-CLIP CIMS deletions, PAR-CLIP T-to-C), or HMM/kernel-density methods (PureCLIP, PARalyzer, CTK). Use when single-nucleotide resolution is required for motif registration (mCross), allele-specific binding (BEAPR), variant-effect prediction, or comparing crosslink chemistry across CLIP variants.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect single-nucleotide crosslink (CL) sites in CLIP-seq data using truncation patterns (iCLIP/eCLIP CITS), crosslink-induced mutations (HITS-CLIP CIMS deletions, PAR-CLIP T-to-C), or HMM/kernel-density methods (PureCLIP, PARalyzer, CTK). Use when single-nucleotide resolution is required for motif registration (mCross), allele-specific binding (BEAPR), variant-effect prediction, or comparing crosslink chemistry across CLIP variants.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect single-nucleotide crosslink (CL) sites in CLIP-seq data using truncation patterns (iCLIP/eCLIP CITS), crosslink-induced mutations (HITS-CLIP CIMS deletions, PAR-CLIP T-to-C), or HMM/kernel-density methods (PureCLIP, PARalyzer, CTK). Use when single-nucleotide resolution is required for motif registration (mCross), allele-specific binding (BEAPR), variant-effect prediction, or comparing crosslink chemistry across CLIP variants.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect single-nucleotide crosslink (CL) sites in CLIP-seq data using truncation patterns (iCLIP/eCLIP CITS), crosslink-induced mutations (HITS-CLIP CIMS deletions, PAR-CLIP T-to-C), or HMM/kernel-density methods (PureCLIP, PARalyzer, CTK). Use when single-nucleotide resolution is required for motif registration (mCross), allele-specific binding (BEAPR), variant-effect prediction, or comparing crosslink chemistry across CLIP variants.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Detect single-nucleotide crosslink (CL) sites in CLIP-seq data using truncation patterns (iCLIP/eCLIP CITS), crosslink-induced mutations (HITS-CLIP CIMS deletions, PAR-CLIP T-to-C), or HMM/kernel-density methods (PureCLIP, PARalyzer, CTK). Use when single-nucleotide resolution is required for motif registration (mCross), allele-specific binding (BEAPR), variant-effect prediction, or comparing crosslink chemistry across CLIP variants.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Comprehensive methodology for auditing and exploiting TLS/SSL implementations and misconfigurations across network services and mobile applications. Covers protocol downgrade attacks including POODLE (CVE-2014-3566) against SSLv3 CBC padding, DROWN (CVE-2016-0800) cross-protocol attack leveraging SSLv2 export ciphers to decrypt TLS sessions, and FREAK (CVE-2015-0204) forcing RSA export-grade key exchange. Addresses BEAST (CVE-2011-3389) exploiting CBC IV predictability in TLS 1.0, CRIME (CVE-2012-4929) and BREACH targeting TLS-level and HTTP-level compression oracles respectively, and Heartbleed (CVE-2014-0160) for OpenSSL memory disclosure. Covers certificate validation bypass techniques for applications with improper hostname verification or chain validation, certificate pinning bypass using Frida and Objection for mobile application interception, HSTS bypass via NTP manipulation and subdomain exploitation, TLS 1.3 0-RTT replay attacks against non-idempotent endpoints, mutual TLS (mTLS) authentication a...

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Audit whether a website serves all pages over HTTPS with valid TLS certificates, which secure connections. Check certificate coverage and expiration, permanent redirects from HTTP, and HTTPS URLs for internal links and resources, then review the necessary configuration changes.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Auditing HTTPS coverage across a website
• Checking certificate expiration and hostname coverage
• Verifying permanent redirects from HTTP to HTTPS

Audit a live web page for accessibility issues and produce a fix worklist with exact element selectors, evidence, and suggested changes. Findings include impact counts and source locations when available, without editing the application.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Check accessibility after a UI change
• Locate contrast and accessible-name issues
• Prepare a fix worklist with element selectors

Analyze Android apps in a CTF sandbox using static inspection and Frida hooks, which observe or alter running code. Trace request signing, local storage, and Java-to-native boundaries to reproduce a request accepted by the server.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Tracing request-signing inputs and outputs
• Inspecting Java-to-native calls with runtime hooks
• Examining app settings, databases, and token storage

Monitor public certificate issuance records to find suspected phishing domains, brand lookalikes, and unauthorized certificates. Use crt.sh for historical searches and Certstream for live alerts, then summarize suspicious findings and detection reasons in a report.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Monitor domains that resemble a company brand
• Investigate certificate issuance history
• Discover subdomains in public certificate records

Configure how GKE applications receive traffic from the internet or internal networks. The skill provides configuration templates for routing, load balancing, certificates, and access protection, and guides diagnosis of failed health checks, dropped requests, and TLS connection problems.

한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.

• Expose a GKE application through Gateway API or Ingress
• Split traffic between application versions during a rollout
• Configure Cloud Armor protection and HTTPS certificates

Discover RBP binding motifs from CLIP-seq peaks or single-nucleotide crosslink sites using HOMER, MEME/STREME, kpLogo, mCross (CL-position-registered motifs), PEKA (positional k-mer enrichment), RBPamp (affinity), and RNA Bind-n-Seq (RBNS) cross-validation. Use when characterizing RBP sequence specificity, registering motifs to crosslink positions, validating in vivo CLIP motifs against in vitro RBNS Kd, reconciling motif disagreements across tools, or correcting for the uracil crosslinking bias that contaminates raw CLIP motif logos.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.