A tool for automatic black-box detection of missing hostname verification, including for applications that use certificate pinning.
This work was carried out by Chris McMahon Stone, Tom Chothia and Flavio Garcia at the University of Birmingham.
If you have any questions about the operation of the tool, please contact Chris
Or any questions on the research in general, contact Chris, Tom, or Flavio.