Claudiu's GSOC status report #12 of 13

[Claudiu Perta <claudiu.perta () gmail com>]

Hi everybody,

This is my weekly status report.

* ssl-ccs-injection.nse
      * Fixed false positive on socket timeout

* TLS Next Protocol Negotiation in socket:reconnect_ssl() [1]
      * Extended nsock_event with NPN info
      * Added error handling (NOT SUPPORTED and NO OVERLAP)

* Lua zlib binding [2]
      * Switched to the implementation available at
https://github.com/LuaDist/lzlib

* SPDY
      * Added basic session handling
      * Fixed deflate error on missing Z_SYNC_FLUSH
      * Investigated a couple of SPDY vulnerabilities [3,4], to be
implemented as nse scripts

Cheers,
Claudiu

[1] https://codereview.appspot.com/122380043
[2] https://codereview.appspot.com/127950045
[3] http://mailman.nginx.org/pipermail/nginx-announce/2014/000132.html
[4] http://mailman.nginx.org/pipermail/nginx-announce/2014/000135.html
_______________________________________________
Sent through the dev mailing list
http://nmap.org/mailman/listinfo/dev
Archived at http://seclists.org/nmap-dev/