Fix F5 cookie in 10.x.x.x. (3.0)

The F5 cookie decoder doesn't detect IPs in the 10.x.x.x space for non-encrypted cookies. This fixes the regex pattern, see also
https://github.com/drwetter/F5-BIGIP-Decoder/pull/4 and https://github.com/drwetter/testssl.sh/pull/2577
This commit is contained in:
Dirk Wetter 2024-10-12 21:06:21 +02:00
parent eee26817c5
commit 968e5509ad

View File

@ -3001,7 +3001,7 @@ sub_f5_bigip_check() {
[[ -z "$cookievalue" ]] && break [[ -z "$cookievalue" ]] && break
cookievalue=${cookievalue/;/} cookievalue=${cookievalue/;/}
debugme echo $cookiename : $cookievalue debugme echo $cookiename : $cookievalue
if grep -Eq '[0-9]{9,10}\.[0-9]{3,5}\.0000' <<< "$cookievalue"; then if grep -Eq '[0-9]{8,10}\.[0-9]{3,5}\.0000' <<< "$cookievalue"; then
ip="$(f5_ip_oldstyle "$cookievalue")" ip="$(f5_ip_oldstyle "$cookievalue")"
port="$(f5_port_decode $cookievalue)" port="$(f5_port_decode $cookievalue)"
out "${spaces}F5 cookie (default IPv4 pool member): "; pr_italic "$cookiename "; prln_svrty_medium "${ip}:${port}" out "${spaces}F5 cookie (default IPv4 pool member): "; pr_italic "$cookiename "; prln_svrty_medium "${ip}:${port}"