Top 10 winner

FREAK (Factoring Attack on RSA-Export Keys)

Tracking the FREAK Attack

Zakir Durumeric, David Adrian, Ariana Mirian, Michael Bailey and J. Alex Halderman · freakattack.com

FREAK lets a network attacker downgrade a TLS handshake to 512-bit export-grade RSA, factor that key cheaply, then decrypt or modify the HTTPS session. The site reports daily Internet-wide scans of vulnerable servers and clients, names affected Alexa top-10,000 domains, and offers test tools and remediation guidance.

Record

Document

Tracking the FREAK Attack

Researcher

Zakir Durumeric, David Adrian, Ariana Mirian, Michael Bailey and J. Alex Halderman

Published by

freakattack.com

Topic

Other

In the archive

• Ranked #1 in the 2015 Top 10 Web Hacking Techniques

Tags

• tls
• https
• cve
• large-scale-scan
• measurement-study
• mitigation
• detection
• owasp-a02-2021
• owasp-a09-2021

This page is the archive's own catalogue record. The research is the work of Zakir Durumeric, David Adrian, Ariana Mirian, Michael Bailey and J. Alex Halderman, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 9 August 2026.