Rupture - A framework for BREACH and other compression-based crypto attacks

For more information, please visit Rupture's home page: RuptureIt

• Dimitris Karakostas dimit.karakostas@gmail.com
• Dionysis Zindros dionyziz@gmail.com
• Eva Sarafianou eva.sarafianou@gmail.com

• Install rupture.

rupture/ $ ./install.sh all

• Install injection.

rupture$ ./install.sh injection

• Install client.

rupture$ ./install.sh client

• Install backend.

rupture/ $ ./install.sh backend

• Install sniffer.

rupture/ $ ./install.sh sniffer

• Edit following configuration scripts:
  • rupture/backend/target_config.yml
  • rupture/backend/victim_config.yml
• Setup backend.

rupture $ ./rupture setup

• Deploy backend.

rupture $ ./rupture backend

• Deploy realtime.

rupture $ ./rupture realtime

• Deploy sniffer.

rupture $ ./rupture sniffer

• You can also deploy backend, realtime and sniffer modules all together:

rupture/ $ sudo ./rupture attack

• Client code is in following directory:
  
  • rupture/client/client_
  where is the victim's id in the backend database.
  
• Open the following test HTML page in browser:
  
  • rupture/client/client_/test.html
  or inject client code in HTTP responses:
  

rupture/client/client_<id> $ ./inject.sh