Collected research

Practical New Developments in the BREACH Attack

Dimitris Karakostas and Dionysis Zindros · blackhat.com

Extends the BREACH compression side channel to modern deployments: statistical methods defeat the noise introduced by AES block ciphers and dynamic pages, and a command-and-control channel injected into plain HTTP keeps the victim browser issuing the needed requests. The Rupture framework parallelises the attack and recovers secrets from Facebook Chat and Gmail endpoints over HTTPS.

Record

Researcher

Dimitris Karakostas and Dionysis Zindros

Published by

blackhat.com

Format

Whitepaper

Topic

Crypto

In the archive

• Collected in the 2016–17 research round

Related sources

• Practical New Developments in The Breach Attack

Tags

• side-channel
• tls
• https
• info-leak
• http
• tooling
• prior-art-extension
• mitigation
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of Dimitris Karakostas and Dionysis Zindros, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.