h00die
48 lines
2.2 KiB
Markdown
48 lines
2.2 KiB
Markdown
## Description
|
|
|
|
This module queries a host or range of hosts and pull the SSL certificate information if one is installed.
|
|
|
|
## Verification Steps
|
|
|
|
1. Do: ```use auxiliary/scanner/http/ssl```
|
|
2. Do: ```set RHOSTS [IP]```
|
|
3. Do: ```set THREADS [num of threads]```
|
|
4. Do: ```run```
|
|
|
|
## Scenarios
|
|
|
|
```
|
|
msf > use auxiliary/scanner/http/ssl
|
|
msf auxiliary(ssl) > set RHOSTS 192.168.1.200-254
|
|
RHOSTS => 192.168.1.200-254
|
|
msf auxiliary(ssl) > set THREADS 20
|
|
THREADS => 20
|
|
msf auxiliary(ssl) > run
|
|
|
|
[*] Error: 192.168.1.205: OpenSSL::SSL::SSLError SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read server hello A
|
|
[*] Error: 192.168.1.206: OpenSSL::SSL::SSLError SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read server hello A
|
|
[*] 192.168.1.208:443 Subject: /C=--/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=localhost.localdomain/emailAddress=root@localhost.localdomain Signature Alg: md5WithRSAEncryption
|
|
[*] 192.168.1.208:443 WARNING: Signature algorithm using MD5 (md5WithRSAEncryption)
|
|
[*] 192.168.1.208:443 has common name localhost.localdomain
|
|
[*] 192.168.1.211:443 Subject: /C=--/ST=SomeState/L=SomeCity/O=SomeOrganization/OU=SomeOrganizationalUnit/CN=localhost.localdomain/emailAddress=root@localhost.localdomain Signature Alg: sha1WithRSAEncryption
|
|
[*] 192.168.1.211:443 has common name localhost.localdomain
|
|
[*] Scanned 13 of 55 hosts (023% complete)
|
|
[*] Error: 192.168.1.227: OpenSSL::SSL::SSLError SSL_connect SYSCALL returned=5 errno=0 state=SSLv3 read server hello A
|
|
[*] 192.168.1.223:443 Subject: /CN=localhost Signature Alg: sha1WithRSAEncryption
|
|
[*] 192.168.1.223:443 has common name localhost
|
|
[*] 192.168.1.222:443 WARNING: Signature algorithm using MD5 (md5WithRSAEncryption)
|
|
[*] 192.168.1.222:443 has common name MAILMAN
|
|
[*] Scanned 30 of 55 hosts (054% complete)
|
|
[*] Scanned 31 of 55 hosts (056% complete)
|
|
[*] Scanned 39 of 55 hosts (070% complete)
|
|
[*] Scanned 41 of 55 hosts (074% complete)
|
|
[*] Scanned 43 of 55 hosts (078% complete)
|
|
[*] Scanned 45 of 55 hosts (081% complete)
|
|
[*] Scanned 46 of 55 hosts (083% complete)
|
|
[*] Scanned 53 of 55 hosts (096% complete)
|
|
[*] Scanned 55 of 55 hosts (100% complete)
|
|
[*] Auxiliary module execution completed
|
|
msf auxiliary(ssl) >
|
|
```
|
|
|