
Questo script verifica se la tua lista di server accetta suite di cifratura Export e potrebbe essere vulnerabile a CVE-2015-0204
Questo script verifica se la tua lista di server accetta suite di cifratura Export e potrebbe essere vulnerabile a CVE-2015-0204
Utilizzo: ./freak.vuln.check.sh <ip[:porta] | file_con_lista_ip[:porta] >
Il programma accetta una singola sintassi ip:porta o dominio oppure una lista di IP o domini. Indicherà se le cifrature Export (disponibili nel binario openssl della tua macchina locale) sono accettate dal server remoto. Inoltre, lo script salverà un file CSV con queste informazioni.
root@fmt-kali:~/FreakVulnChecker# ./freak.vuln.check.sh myservers.txt
bing.com (204.79.197.200:443): EXP-EDH-RSA-DES-CBC-SHA SUPPORTED
bing.com (204.79.197.200:443): EXP-EDH-DSS-DES-CBC-SHA SUPPORTED
bing.com (204.79.197.200:443): EXP-DES-CBC-SHA SUPPORTED
bing.com (204.79.197.200:443): EXP-RC2-CBC-MD5 SUPPORTED
bing.com (204.79.197.200:443): EXP-RC4-MD5 SUPPORTED
23.223.104.49 (23.223.104.49:443): EXP-EDH-RSA-DES-CBC-SHA NOT SUPPORTED
23.223.104.49 (23.223.104.49:443): EXP-EDH-DSS-DES-CBC-SHA NOT SUPPORTED
23.223.104.49 (23.223.104.49:443): EXP-DES-CBC-SHA SUPPORTED
23.223.104.49 (23.223.104.49:443): EXP-RC2-CBC-MD5 SUPPORTED
23.223.104.49 (23.223.104.49:443): EXP-RC4-MD5 SUPPORTED
216.58.211.206 (216.58.211.206:443): EXP-EDH-RSA-DES-CBC-SHA NOT SUPPORTED
216.58.211.206 (216.58.211.206:443): EXP-EDH-DSS-DES-CBC-SHA NOT SUPPORTED
216.58.211.206 (216.58.211.206:443): EXP-DES-CBC-SHA NOT SUPPORTED
216.58.211.206 (216.58.211.206:443): EXP-RC2-CBC-MD5 NOT SUPPORTED
216.58.211.206 (216.58.211.206:443): EXP-RC4-MD5 NOT SUPPORTED
204.79.197.200 (204.79.197.200:443): EXP-EDH-RSA-DES-CBC-SHA SUPPORTED
204.79.197.200 (204.79.197.200:443): EXP-EDH-DSS-DES-CBC-SHA SUPPORTED
204.79.197.200 (204.79.197.200:443): EXP-DES-CBC-SHA SUPPORTED
204.79.197.200 (204.79.197.200:443): EXP-RC2-CBC-MD5 SUPPORTED
204.79.197.200 (204.79.197.200:443): EXP-RC4-MD5 SUPPORTED
123.125.116.19 (123.125.116.19:443): EXP-EDH-RSA-DES-CBC-SHA NOT SUPPORTED
123.125.116.19 (123.125.116.19:443): EXP-EDH-DSS-DES-CBC-SHA NOT SUPPORTED
123.125.116.19 (123.125.116.19:443): EXP-DES-CBC-SHA SUPPORTED
123.125.116.19 (123.125.116.19:443): EXP-RC2-CBC-MD5 SUPPORTED
123.125.116.19 (123.125.116.19:443): EXP-RC4-MD5 SUPPORTED
zomato.com (54.151.251.33:443): EXP-EDH-RSA-DES-CBC-SHA NOT SUPPORTED
zomato.com (54.151.251.33:443): EXP-EDH-DSS-DES-CBC-SHA NOT SUPPORTED
zomato.com (54.151.251.33:443): EXP-DES-CBC-SHA NOT SUPPORTED
zomato.com (54.151.251.33:443): EXP-RC2-CBC-MD5 NOT SUPPORTED
zomato.com (54.151.251.33:443): EXP-RC4-MD5 NOT SUPPORTED
adxcore.com (188.165.36.101:443): EXP-EDH-RSA-DES-CBC-SHA SUPPORTED
adxcore.com (188.165.36.101:443): EXP-EDH-DSS-DES-CBC-SHA NOT SUPPORTED
adxcore.com (188.165.36.101:443): EXP-DES-CBC-SHA SUPPORTED
adxcore.com (188.165.36.101:443): EXP-RC2-CBC-MD5 SUPPORTED
adxcore.com (188.165.36.101:443): EXP-RC4-MD5 SUPPORTED