Advanced Infrastructure Penetration Testing

POODLE attack (CVE-2014-3566) 

The Padding Oracle On Downgraded Legacy Encryption (POODLE) attack was discovered in 2014. This attack exploits the fact that many servers  support SSLv3 on one hand and a block padding vulnerability on the other hand. Following diagram demonstrates POODLE attack:

In general, as a first step, a client sends the supported TLS versions. In this case, the attacker intercepts the traffic performing a man-in-the-middle attack and mimics the server, until the connection is downgraded to SSLv3. If the connection is established, the attacker exploits a cipher block chaining vulnerability, by manipulating the padding ...