Commit Graph

  • cc9046064c Update Readme.md Dirk Wetter 2015-01-16 17:16:22 +01:00
  • b0c6062cb7 Update Readme.md Dirk Wetter 2015-01-16 17:16:22 +01:00
  • d129531371 fine tuning on banner Dirk 2015-01-15 20:29:46 +01:00
  • 5853202efd fine tuning on banner Dirk 2015-01-15 20:29:46 +01:00
  • 4c72e059b8 - FIX: grep -a if we hit binary content with http_header (also if otherwise specified) - NEW: can specify URL (used for header matters and breach) - FIX: better handling of >1 cookies Dirk 2015-01-14 12:23:53 +01:00
  • 4c6f0d9a50 - FIX: grep -a if we hit binary content with http_header (also if otherwise specified) - NEW: can specify URL (used for header matters and breach) - FIX: better handling of >1 cookies Dirk 2015-01-14 12:23:53 +01:00
  • 549d523728 * NEW: cookie flags (experimental) [URL is missing] * FIX: 30x handling for http_header (hint for final URL if stalled) * FIX: proper display of app-banners if >1 Dirk 2015-01-14 09:48:44 +01:00
  • 3d81a7b5ec * NEW: cookie flags (experimental) [URL is missing] * FIX: 30x handling for http_header (hint for final URL if stalled) * FIX: proper display of app-banners if >1 Dirk 2015-01-14 09:48:44 +01:00
  • 400f06b64f SNI is not anymore 2do (removed misleading comment) Dirk 2015-01-12 23:28:38 +01:00
  • 44d8f67998 SNI is not anymore 2do (removed misleading comment) Dirk 2015-01-12 23:28:38 +01:00
  • c8e4db1a39 debugging more fine grained Dirk 2015-01-12 23:15:26 +01:00
  • 84204a80a3 debugging more fine grained Dirk 2015-01-12 23:15:26 +01:00
  • 16c14de324 now with SNI! Dirk 2015-01-12 22:56:15 +01:00
  • ac6a67a299 now with SNI! Dirk 2015-01-12 22:56:15 +01:00
  • d5ed01a3ab now checker fo SSLv3 to TLSV1.2 (SNI missing for now) Dirk 2015-01-10 22:08:11 +01:00
  • f0747dd2fc now checker fo SSLv3 to TLSV1.2 (SNI missing for now) Dirk 2015-01-10 22:08:11 +01:00
  • 0fd4e06f21 typo in tempdir led to missing gost cipher Dirk 2015-01-08 14:16:22 +01:00
  • cedeff2b42 typo in tempdir led to missing gost cipher Dirk 2015-01-08 14:16:22 +01:00
  • bcda178bd7 working prototype for SSLv2 client hello + parsing server hello in bash Dirk 2015-01-07 23:57:16 +01:00
  • 446f7bf152 working prototype for SSLv2 client hello + parsing server hello in bash Dirk 2015-01-07 23:57:16 +01:00
  • 64cafd40f0 Merge branch 'master' of https://github.com/drwetter/testssl.sh Dirk 2015-01-07 23:30:24 +01:00
  • 62f20a6cd2 Merge branch 'master' of https://github.com/drwetter/testssl.sh Dirk 2015-01-07 23:30:24 +01:00
  • c01ec13e2e - moved utils to separate dir Dirk 2015-01-07 23:29:05 +01:00
  • 5044412f39 - moved utils to separate dir Dirk 2015-01-07 23:29:05 +01:00
  • 1ad9251e5e safer batch processing if port isn't available Dirk 2015-01-07 23:16:45 +01:00
  • decade9986 safer batch processing if port isn't available Dirk 2015-01-07 23:16:45 +01:00
  • 37fea08022 Merge remote-tracking branch 'origin/revert-48-master' Dirk 2015-01-07 23:09:57 +01:00
  • aa546b520e Merge remote-tracking branch 'origin/revert-48-master' Dirk 2015-01-07 23:09:57 +01:00
  • b78362e41f safer bacth processing if port isn't available Dirk 2015-01-06 16:25:19 +01:00
  • 8a3e0267ba safer bacth processing if port isn't available Dirk 2015-01-06 16:25:19 +01:00
  • afa5669c89 Revert "Change question logic on non-SSL port" Dirk Wetter 2015-01-06 16:10:21 +01:00
  • 2556377398 Revert "Change question logic on non-SSL port" Dirk Wetter 2015-01-06 16:10:21 +01:00
  • d7d884c16e Merge pull request #48 from lwindolf/master Dirk Wetter 2015-01-06 16:01:07 +01:00
  • e816e4877a Merge pull request #48 from lwindolf/master Dirk Wetter 2015-01-06 16:01:07 +01:00
  • 21db6b4eba Change question logic on non-SSL port Lars Windolf 2015-01-03 11:41:35 +01:00
  • d1ab23c146 Change question logic on non-SSL port Lars Windolf 2015-01-03 11:41:35 +01:00
  • c48944c5fb - check for CN wrt SNI / no SNI - fix different responses for CACert Dirk 2014-12-23 09:59:03 +01:00
  • eae1b2810f - check for CN wrt SNI / no SNI - fix different responses for CACert Dirk 2014-12-23 09:59:03 +01:00
  • a8ef2dfa42 - Negotiated cipher per proto - nr_ciphers of used openssl version in banner - spdy_pre check - -testversion_new --> -testversion Dirk 2014-12-21 23:22:50 +01:00
  • 4aa674d138 - Negotiated cipher per proto - nr_ciphers of used openssl version in banner - spdy_pre check - -testversion_new --> -testversion Dirk 2014-12-21 23:22:50 +01:00
  • 496cf11774 - Cipher order check! (also for starttls) - includes a remark 4 default_cipher (limited sense as client will pick) - selfsigned certs: error! - number of local ciphers in check with allciphers Dirk 2014-12-21 00:47:23 +01:00
  • a570d907e9 - Cipher order check! (also for starttls) - includes a remark 4 default_cipher (limited sense as client will pick) - selfsigned certs: error! - number of local ciphers in check with allciphers Dirk 2014-12-21 00:47:23 +01:00
  • f2ce663f4e Merge branch 'master' of github.com:drwetter/testssl.sh Dirk 2014-12-19 17:06:37 +01:00
  • 04b6795f94 Merge branch 'master' of github.com:drwetter/testssl.sh Dirk 2014-12-19 17:06:37 +01:00
  • 95f9e844c0 - tempfile handling: every function leaves one, if DEBUG is set - FIX*2: OPENSSL_CONF/GOST_CONF Dirk 2014-12-19 17:02:26 +01:00
  • 21493fb788 - tempfile handling: every function leaves one, if DEBUG is set - FIX*2: OPENSSL_CONF/GOST_CONF Dirk 2014-12-19 17:02:26 +01:00
  • 70f0e3e4a4 Update Readme.md Dirk Wetter 2014-12-19 15:52:05 +01:00
  • 9e53070598 Update Readme.md Dirk Wetter 2014-12-19 15:52:05 +01:00
  • 8eace3988c Update Readme.md Dirk Wetter 2014-12-19 15:51:32 +01:00
  • c2ef5d1da8 Update Readme.md Dirk Wetter 2014-12-19 15:51:32 +01:00
  • 1a699c7bbf - subjectAltName Dirk 2014-12-19 07:12:20 +01:00
  • 8635012cf5 - subjectAltName Dirk 2014-12-19 07:12:20 +01:00
  • 61c3541f8d - NEW: certificate info, details: - NEW: CN, SAN - NEW: OCSP URI - NEW: CRL distr point - NEW: Issuer - NEW: expiration - NEW: signature algo - renamed cmdline --simple_preference to --server_defaults - now we have a TEMPDIR where all files are written toA - function or handling/removing TMPFILE Dirk 2014-12-18 09:33:24 +01:00
  • 521a7160a9 - NEW: certificate info, details: - NEW: CN, SAN - NEW: OCSP URI - NEW: CRL distr point - NEW: Issuer - NEW: expiration - NEW: signature algo - renamed cmdline --simple_preference to --server_defaults - now we have a TEMPDIR where all files are written toA - function or handling/removing TMPFILE Dirk 2014-12-18 09:33:24 +01:00
  • 489fbfce9e Update Readme.md Dirk Wetter 2014-12-09 14:25:38 +01:00
  • 5d66eeef05 Update Readme.md Dirk Wetter 2014-12-09 14:25:38 +01:00
  • 8dd2425ada - RELEASE: final 2.2 - change of cmd line order for STARTTLS - help more clear Dirk 2014-12-08 10:32:51 +01:00
  • b40c0b7178 - RELEASE: final 2.2 - change of cmd line order for STARTTLS - help more clear Dirk 2014-12-08 10:32:51 +01:00
  • 05d7047865 - BUGFIX: potential stalling in HTTP Header query - BUGFIX: HTTP specific vuln. won't be checked if service is not http (we still check crime and also spdy => gmail has spdy for pop and imap) - Feature: service detection: HTTP, IMAP, POP, SMTP - alignment in rDNS output corrected - minor cleanup / improvements Dirk 2014-11-30 01:30:20 +01:00
  • b3efb3c4b0 - BUGFIX: potential stalling in HTTP Header query - BUGFIX: HTTP specific vuln. won't be checked if service is not http (we still check crime and also spdy => gmail has spdy for pop and imap) - Feature: service detection: HTTP, IMAP, POP, SMTP - alignment in rDNS output corrected - minor cleanup / improvements Dirk 2014-11-30 01:30:20 +01:00
  • e2067d1663 - BUGFIX: BSD now has proper heartbleed and ccs injection detection - significant code improvement of hex-byte parser <-> socket sender - BUGFIX: BSD now doesn't put an extra \n if rfc map file is missing - bumped to 2.1rc3, hoping that'll be the last Dirk 2014-11-27 21:33:33 +01:00
  • 27f06f8d50 - BUGFIX: BSD now has proper heartbleed and ccs injection detection - significant code improvement of hex-byte parser <-> socket sender - BUGFIX: BSD now doesn't put an extra \n if rfc map file is missing - bumped to 2.1rc3, hoping that'll be the last Dirk 2014-11-27 21:33:33 +01:00
  • ba76dad503 - for colors: double square brackets (might save a fork to "[ or "test" - in terms of debugging cleaned up listciphers/std_cipherlists - in other terms too Dirk 2014-11-25 13:12:24 +01:00
  • c034cd8a95 - for colors: double square brackets (might save a fork to "[ or "test" - in terms of debugging cleaned up listciphers/std_cipherlists - in other terms too Dirk 2014-11-25 13:12:24 +01:00
  • d948039237 Update Readme.md Dirk Wetter 2014-11-24 16:43:11 +01:00
  • 5228986b25 Update Readme.md Dirk Wetter 2014-11-24 16:43:11 +01:00
  • 18cd3a7a21 Merge pull request #37 from yurivict/master Dirk Wetter 2014-11-24 15:16:42 +01:00
  • b242876597 Merge pull request #37 from yurivict/master Dirk Wetter 2014-11-24 15:16:42 +01:00
  • 6829de54c5 Fixed the problem when COLOR=0 caused 'printf' to break due to leading dashes interpreted as command line options. Yuri 2014-11-22 12:15:47 -08:00
  • 19f936bece Fixed the problem when COLOR=0 caused 'printf' to break due to leading dashes interpreted as command line options. Yuri 2014-11-22 12:15:47 -08:00
  • 7649b20a0d Merge pull request #36 from PeterMosmans/bugfix Dirk Wetter 2014-11-22 18:31:09 +01:00
  • 7cf2030c20 Merge pull request #36 from PeterMosmans/bugfix Dirk Wetter 2014-11-22 18:31:09 +01:00
  • 1a3bebeed8 Fixed minor redirection typo for 'which' command Peter Mosmans 2014-11-22 12:57:36 +10:00
  • c3ab016164 Fixed minor redirection typo for 'which' command Peter Mosmans 2014-11-22 12:57:36 +10:00
  • 00ff1b57a0 - increase first read buffer -- otherwise it's how up at hb reply and lead to false positives Dirk 2014-11-20 18:55:51 +01:00
  • 4c3cc0df8e - increase first read buffer -- otherwise it's how up at hb reply and lead to false positives Dirk 2014-11-20 18:55:51 +01:00
  • 80079edf41 color codes for protocols and default ciphers reflect better a rating - fix: heartbleed function needed a $TMPFILE for determining the TLS protocol - version bumped to 2.1rc2 Dirk 2014-11-20 10:46:55 +01:00
  • d4265742b1 color codes for protocols and default ciphers reflect better a rating - fix: heartbleed function needed a $TMPFILE for determining the TLS protocol - version bumped to 2.1rc2 Dirk 2014-11-20 10:46:55 +01:00
  • db17669b99 - fix in cleanup (while debug) - wrong cmd line option --> help instread of error Dirk 2014-11-19 22:23:13 +01:00
  • 5dd4a8f3fa - fix in cleanup (while debug) - wrong cmd line option --> help instread of error Dirk 2014-11-19 22:23:13 +01:00
  • 9d5d77c813 - protocol check stream lined: similar now for every protocol - NPN/SPDY is not green anymore Dirk 2014-11-19 18:04:43 +01:00
  • 05877dca93 - protocol check stream lined: similar now for every protocol - NPN/SPDY is not green anymore Dirk 2014-11-19 18:04:43 +01:00
  • ab7074aefd - protocol w/o cipher (only SSLv2 so far) - for EVERY protocol now check whether $openssl supports it - better fail for PFS if there are no local ciphers Dirk 2014-11-19 17:08:59 +01:00
  • d77b667489 - protocol w/o cipher (only SSLv2 so far) - for EVERY protocol now check whether $openssl supports it - better fail for PFS if there are no local ciphers Dirk 2014-11-19 17:08:59 +01:00
  • 9fe6b9a917 @oparoz Dirk 2014-11-19 13:26:48 +01:00
  • 52ef1fe684 @oparoz Dirk 2014-11-19 13:26:48 +01:00
  • 93c05e9d12 - banner (opensssl version build date, platform) slightly changed - even clearer warning upon old openssl version (MacOSX!) - oparoz hexdump patch - heartbleed doenst do a precheck anymore --> just sockets as it may lead to false negatives if the client was complied with it disabled (FreeBSD) Dirk 2014-11-19 13:22:22 +01:00
  • 99e472ac01 - banner (opensssl version build date, platform) slightly changed - even clearer warning upon old openssl version (MacOSX!) - oparoz hexdump patch - heartbleed doenst do a precheck anymore --> just sockets as it may lead to false negatives if the client was complied with it disabled (FreeBSD) Dirk 2014-11-19 13:22:22 +01:00
  • 6a0e41d252 - FreeBSD fixes (getent, printf) Dirk 2014-11-18 23:14:17 +01:00
  • f2c44803ed - FreeBSD fixes (getent, printf) Dirk 2014-11-18 23:14:17 +01:00
  • 30a0f1abf7 - Peter Dirk 2014-11-18 20:24:10 +01:00
  • 59bdf48823 - Peter Dirk 2014-11-18 20:24:10 +01:00
  • 4a5de4fd72 small cleanup Dirk 2014-11-18 20:23:17 +01:00
  • 41a480abb4 small cleanup Dirk 2014-11-18 20:23:17 +01:00
  • 6b8b63b4a5 Merge branch 'master' of github.com:drwetter/testssl.sh Dirk 2014-11-18 16:40:14 +01:00
  • 8756151a26 Merge branch 'master' of github.com:drwetter/testssl.sh Dirk 2014-11-18 16:40:14 +01:00
  • 3abb5a0650 Merge pull request #30 from PeterMosmans/cleanup Dirk Wetter 2014-11-18 16:39:32 +01:00
  • 3d6eda97de Merge pull request #30 from PeterMosmans/cleanup Dirk Wetter 2014-11-18 16:39:32 +01:00
  • 68eddd7226 Merge pull request #29 from PeterMosmans/msys Dirk Wetter 2014-11-18 16:30:18 +01:00
  • f067944f2a Merge pull request #29 from PeterMosmans/msys Dirk Wetter 2014-11-18 16:30:18 +01:00