Skip to content

Protocol: SSL ROBOT Vulnerability

Identifier: issue_ssl_robot_vulnerability

Scanner Support

GraphQL Scanner REST Scanner WebApp Scanner ASM Scanner Automated Pentest

Description

The ROBOT attack exploits RSA key-exchange oracle behavior to decrypt captured TLS traffic.

How we test: We probe RSA key-exchange error responses for the oracle behavior described by the ROBOT researchers.

References:

Configuration

Example

Example configuration:

---
security_tests:
  issue_ssl_robot_vulnerability:
    skip: false

Reference

skip

Type: boolean

Skip the test if true.