For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Using Cryptonice to check for HTTPS misconfigurations in devsecops workflows

Co-Author: Katie Newbold, F5 Labs Intern, Summer 2020 A huge thanks to Katie Newbold, lead developer on the Cryptonice project, for her amazing work and patience as I constantly moved the goal p...
Published Jul 20, 2020
Version 1.0
certificates
devops
dns
https
iControlREST
LTM
security
ssl
tls
warburtr0n's avatar
Icon for Employee rankEmployee
I am a principal threat researcher and current director of F5 Labs. My focus areas of research are information security management, cryptography, TLS and identity. After 20 years in IT, much of which has been working with applications and cloud infrastructure, and 7 years of which was spent as a Senior Solutions Engineer within the F5 sales organisation, I wanted a fresh challenge. Security was a growing passion, so I went back to university and earned a distinction in the MSc course of Information Security at Royal Holloway University of London. My dissertation was on the use cryptography within IoT devices and networking protocols. Today I am part of the F5 Labs threat research team and speak at industry events all over the world and regularly contribute to online and broadcast media. I am lead author of the TLS Telemetry and Phishing and Fraud Reports and owner and maintainer of the new F5 Labs tool 'cryptonice'.
View Profile
warburtr0n's avatar
Icon for Employee rankEmployee
I am a principal threat researcher and current director of F5 Labs. My focus areas of research are information security management, cryptography, TLS and identity. After 20 years in IT, much of which has been working with applications and cloud infrastructure, and 7 years of which was spent as a Senior Solutions Engineer within the F5 sales organisation, I wanted a fresh challenge. Security was a growing passion, so I went back to university and earned a distinction in the MSc course of Information Security at Royal Holloway University of London. My dissertation was on the use cryptography within IoT devices and networking protocols. Today I am part of the F5 Labs threat research team and speak at industry events all over the world and regularly contribute to online and broadcast media. I am lead author of the TLS Telemetry and Phishing and Fraud Reports and owner and maintainer of the new F5 Labs tool 'cryptonice'.
View Profile
warburtr0n's avatar
warburtr0n
Icon for Employee rankEmployee
Jul 29, 2020

Happy to say that Cryptonice now has a standalone executable for Windows (for those Python shy amongst you) and also support for Ubuntu 20.04.

 

Check out the docs on https://cryptonice.readthedocs.io/