cybersecurityworks553/cve-2022-3602-and-cve-2022-3786Python-based scanner that detects OpenSSL 3.0.0-3.0.6 servers vulnerable to CVE-2022-3602 and CVE-2022-3786 by checking client authentication requirements on single or multiple targets.
This is a detection script which will determine whether client authentication is required by the SSL server, in which case servers based on OpenSSL 3.0.0 to 3.0.6 will be vulnerable to both CVE-2022-3602 and CVE-2022-3786
usage: openssl_cert_detector.py [-h] [-t TARGET] [-T TARGETS]
optional arguments:
-h, --help show this help message and exit
-t TARGET, --target TARGET
Single IP with port separate by colon. Example: -t 192.168.0.3:3000
-T TARGETS, --targets TARGETS
List of IP and port separate by colon and separated by new line in text file
To check for openssl vulnerability on single ip and port
python openssl_cert_detector.py -t 192.168.0.3:3000
To check for openssl vulnerability on list of ip and its port in separated by new line in text file
python openssl_cert_detector.py -T check.txt