AIS3-2024-Project-TeamD5

Reappear-CVE-2022-21449-TLS-PoC

Before we begin, I would like to thank and pay tribute to some people

[1] Neil Madden ; discovered and disclosed CVE-2022-21449, and here is his excellent WriteUp
[2] Khaled Nassar ; completed the PoC for easy Demo
[3] YuZheng GeGe's Security Playground ; used easy-to-understand YT videos to describe this CVE
[4] The TAs of Group D at AIS3 ; thanks for all the ideas/resources/technical support during the project
Thanks to the above masters for their resources and support. They are strong role models. AIS3 Team D5 expresses gratitude!

HackMD_TeamD5 Collaborative Notes (Click me to go)

Reappear Note

References :

[1] https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/
[2] https://github.com/notkmhn/CVE-2022-21449-TLS-PoC
[3] https://ithelp.ithome.com.tw/articles/10304518
[4] https://nvd.nist.gov/vuln/detail/CVE-2022-21449
[5] https://jfrog.com/blog/cve-2022-21449-psychic-signatures-analyzing-the-new-java-crypto-vulnerability/
[6] https://developer.aliyun.com/article/1028316
[7] https://www.youtube.com/watch_1
[8] https://www.youtube.com/watch_2
[9] https://www.fujifilm.com/fbtw/zh-tw/insights/article/zero-trust

tags: AIS32024 D Group Interdisciplinary Project Collaborative Notes