mirror of
https://github.com/drwetter/testssl.sh.git
synced 2025-01-07 09:10:57 +01:00
commit
bd4575e14d
@ -9116,7 +9116,7 @@ run_ticketbleed() {
|
|||||||
[[ $VULN_COUNT -le $VULN_THRESHLD ]] && outln && pr_headlineln " Testing for Ticketbleed vulnerability " && outln
|
[[ $VULN_COUNT -le $VULN_THRESHLD ]] && outln && pr_headlineln " Testing for Ticketbleed vulnerability " && outln
|
||||||
pr_bold " Ticketbleed"; out " ($cve), experiment. "
|
pr_bold " Ticketbleed"; out " ($cve), experiment. "
|
||||||
|
|
||||||
[[ "$SERVICE" != HTTP ]] && prln "-- (applicable only for HTTPS)" && return 0
|
[[ "$SERVICE" != HTTP ]] && outln "-- (applicable only for HTTPS)" && return 0
|
||||||
|
|
||||||
if $(has_server_protocol "tls1"); then
|
if $(has_server_protocol "tls1"); then
|
||||||
tls_hexcode="x03, x01"
|
tls_hexcode="x03, x01"
|
||||||
@ -9548,7 +9548,7 @@ run_breach() {
|
|||||||
pr_svrty_high "potentially NOT ok, uses $result HTTP compression."
|
pr_svrty_high "potentially NOT ok, uses $result HTTP compression."
|
||||||
outln "$disclaimer"
|
outln "$disclaimer"
|
||||||
outln "$spaces$when_makesense"
|
outln "$spaces$when_makesense"
|
||||||
fileout "breach" "HIGH" "BREACH: potentially VULNERABLE, uses $result HTTP compression. $disclaimer ($when_makesense)" "$cve" "$cwe" "$hint"
|
fileout "breach" "MEDIUM" "BREACH: potentially VULNERABLE, uses $result HTTP compression. $disclaimer ($when_makesense)" "$cve" "$cwe" "$hint"
|
||||||
ret=1
|
ret=1
|
||||||
fi
|
fi
|
||||||
# Any URL can be vulnerable. I am testing now only the given URL!
|
# Any URL can be vulnerable. I am testing now only the given URL!
|
||||||
@ -12990,5 +12990,5 @@ lets_roll() {
|
|||||||
#}
|
#}
|
||||||
|
|
||||||
#main
|
#main
|
||||||
exit $?
|
exit $ret
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user