国产精品久久久aaaa,日日干夜夜操天天插,亚洲乱熟女香蕉一区二区三区少妇,99精品国产高清一区二区三区,国产成人精品一区二区色戒,久久久国产精品成人免费,亚洲精品毛片久久久久,99久久婷婷国产综合精品电影,国产一区二区三区任你鲁

電子發燒友App

硬聲App

掃碼添加小助手

加入工程師交流群

搜索歷史

清空
搜索熱詞
      0
      • 聊天消息
      • 系統消息
      • 評論與回復
      VIP于 到期 續費
      登錄后你可以
      • 下載海量資料
      • 學習在線課程
      • 觀看技術視頻
      • 寫文章/發帖/加入社區
      會員中心
      創作中心
      發布
      創作活動

      完善資料讓更多小伙伴認識你，還能領取20積分哦，立即完善>

      3天內不再提示
      電子發燒友網>電子資料下載>電子資料>striptls審計代理

      striptls審計代理

      2022-05-09 | zip | 0.03 MB | 次下載 | 2積分

      資料介紹

      授權協議 CC0
      開發語言 Python
      軟件類型 開源軟件
      所屬分類 管理和監控、 安全相關

      軟件簡介

      STARTTLS?是對純文本通信協議的擴展。它提供一種方式將純文本連接升級為加密連接（TLS或SSL），而不是另外使用一個端口作加密通信。

      striptls是一款端口剝離攻擊的POC實現

      SMTP

      SMTP.StripFromCapabilities?-?server?response?capability?patchSMTP.StripWithInvalidResponseCode?-?client?STARTTLS?stripping,?invalid?response?codeSMTP.UntrustedIntercept?-?STARTTLS?interception?(client?and?server?talking?ssl)?(requires?server.pem?in?pwd)SMTP.StripWithTemporaryErrorSMTP.StripWithErrorSMTP.ProtocolDowngradeStripExtendedModeSMTP.InjectCommand

      POP3

      POP3.StripFromCapabilitiesPOP3.StripWithErrorPOP3.UntrustedIntercept

      IMAP

      IMAP.StripFromCapabilitiesIMAP.StripWithErrorIMAP.UntrustedInterceptIMAP.ProtocolDowngradeToV2

      FTP

      FTP.StripFromCapabilitiesFTP.StripWithErrorFTP.UntrustedIntercept

      NNTP

      NNTP.StripFromCapabilitiesNNTP.StripWithErrorNNTP.UntrustedIntercept

      XMPP

      XMPP.StripFromCapabilities
XMPP.StripInboundTLS
XMPP.UntrustedIntercept
ACAP?(untested)
ACAP.StripFromCapabilities
ACAP.StripWithError
ACAP.UntrustedIntercept

      IRC

      IRC.StripFromCapabilitiesIRC.StripWithErrorIRC.UntrustedInterceptIRC.StripWithNotRegisteredIRC.StripCAPWithNotregisteredIRC.StripWithSilentDrop

      結果：

      -?[*]?client:?127.0.0.1-?????[Vulnerable!]?-?????[Vulnerable!]?-?????[???????????]?-?????[Vulnerable!]?-?[*]?client:?192.168.139.1-?????[Vulnerable!]?-?????[Vulnerable!]?-?????[Vulnerable!]?

      實例:

      #>?python?-m?striptls?--help????#?from?pip/setup.py#>?python?striptls?--help???????#?from?source?/?root?folderUsage:?striptls?[options]???????example:?striptls?--listen?0.0.0.0:25?--remote?mail.server.tld:25Options:
??????-h,?--help????????????show?this?help?message?and?exit??-v,?--verbose?????????make?lots?of?noise?[default]
??????-l?LISTEN,?--listen=LISTENlisten?ip:port?[default:?0.0.0.0:]
??????-r?REMOTE,?--remote=REMOTE
????????????????????????????remote?target?ip:port?to?forward?sessions?to
??????-k?KEY,?--key=KEY?????SSL?Certificate?and?Private?key?file?to?use,?PEMformat?assumed?[default:?server.pem]
??????-x?VECTORS,?--vectors=VECTORS????????????????????????????Comma?separated?list?of?vectors.?Use?'ALL'?(default)????????????????????????????to?select?all?vectors.?Available?vectors:
????????????????????????????FTP.StripFromCapabilities,?FTP.StripWithError,
????????????????????????????FTP.UntrustedIntercept,?IMAP.StripFromCapabilities,
????????????????????????????IMAP.StripWithError,?IMAP.UntrustedIntercept,
????????????????????????????NNTP.StripFromCapabilities,?NNTP.StripWithError,
????????????????????????????NNTP.UntrustedIntercept,?POP3.StripFromCapabilities,
????????????????????????????POP3.StripWithError,?POP3.UntrustedIntercept,
????????????????????????????SMTP.ProtocolDowngradeStripExtendedMode,
????????????????????????????SMTP.StripFromCapabilities,?SMTP.StripWithError,
????????????????????????????SMTP.StripWithInvalidResponseCode,
????????????????????????????SMTP.StripWithTemporaryError,?SMTP.UntrustedIntercept,
????????????????????????????XMPP.StripFromCapabilities,?XMPP.StripInboundTLS,
????????????????????????????XMPP.UntrustedIntercept?[default:?ALL]

      安裝：

      1.從pip安裝

      #>?pip?install?striptls

      2.從源安裝

      #>?setup.py?install

      示例:

      ??????????????????inbound????????????????????outbound
[inbound_peer]<------------->[listen:proxy]<------------->[outbound_peer/target]
??smtp-client???????????????????striptls????????????????????remote/target

      本地?smtp-client?->?localhost:8825?(代理) ->?mail.gmx.net:25

      審計模式:

      在特定的情況下遍歷所有協議并且跟蹤違反starttls協議的客戶端。你可以選擇按Ctrl + C來中止審核并打印結果。

      #> python striptls --listen localhost:8825 --remote=mail.gmx.net:25
2016-02-02 22:11:56,275 - INFO ? ? -  ready.
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:21 ? , proto: ? ? FTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:21 ? , proto: ? ? FTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:21 ? , proto: ? ? FTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:143 ?, proto: ? ?IMAP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:143 ?, proto: ? ?IMAP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:143 ?, proto: ? ?IMAP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:119 ?, proto: ? ?NNTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:119 ?, proto: ? ?NNTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:119 ?, proto: ? ?NNTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:110 ?, proto: ? ?POP3): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:110 ?, proto: ? ?POP3): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,276 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,276 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,276 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,276 - DEBUG ? ?- * added test (port:5222 , proto: ? ?XMPP): 
2016-02-02 22:11:56,276 - INFO ? ? - ]), 110: set([, ]), 143: set([, , ]), 21: set([, , ]), 119: set([, , ]), 25: set([, , , , ])}>
2016-02-02 22:12:08,477 - DEBUG ? ?-  - protocol detected (target port)
2016-02-02 22:12:08,530 - INFO ? ? -  client ('127.0.0.1', 28902) has connected
2016-02-02 22:12:08,530 - INFO ? ? -  connecting to target ('mail.gmx.net', 25)
2016-02-02 22:12:08,805 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'220 gmx.com (mrgmx001) Nemesis ESMTP Service ready\r\n'
2016-02-02 22:12:08,805 - DEBUG ? ?- 
2016-02-02 22:12:09,759 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'ehlo [192.168.139.1]\r\n'
2016-02-02 22:12:09,850 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250 STARTTLS\r\n'
2016-02-02 22:12:09,851 - DEBUG ? ?-  [client] <= [server][mangled] '250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250-STARTTLS\r\n250 STARTTLS\r\n'
2016-02-02 22:12:09,867 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'STARTTLS\r\n'
2016-02-02 22:12:09,867 - DEBUG ? ?-  [client] <= [server][mangled] '200 STRIPTLS\r\n'
2016-02-02 22:12:09,867 - DEBUG ? ?-  [client] => [server][mangled] None
2016-02-02 22:12:09,883 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'mail FROM: size=10\r\n'
2016-02-02 22:12:09,983 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'530 Authentication required\r\n'
2016-02-02 22:12:09,992 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'rset\r\n'
2016-02-02 22:12:10,100 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250 OK\r\n'
2016-02-02 22:12:10,116 - WARNING ?-  terminated.
2016-02-02 22:12:13,056 - DEBUG ? ?-  - protocol detected (target port)
2016-02-02 22:12:13,056 - INFO ? ? -  client ('127.0.0.1', 28905) has connected
2016-02-02 22:12:13,057 - INFO ? ? -  connecting to target ('mail.gmx.net', 25)
2016-02-02 22:12:13,241 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'220 gmx.com (mrgmx003) Nemesis ESMTP Service ready\r\n'
2016-02-02 22:12:13,241 - DEBUG ? ?- 
2016-02-02 22:12:14,197 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'ehlo [192.168.139.1]\r\n'
2016-02-02 22:12:14,289 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250 STARTTLS\r\n'
2016-02-02 22:12:14,304 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'STARTTLS\r\n'
2016-02-02 22:12:14,305 - DEBUG ? ?-  [client] <= [server][mangled] '454 TLS not available due to temporary reason\r\n'
2016-02-02 22:12:14,305 - DEBUG ? ?-  [client] => [server][mangled] None
2016-02-02 22:12:14,320 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'mail FROM: size=10\r\n'
2016-02-02 22:12:14,411 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'530 Authentication required\r\n'
2016-02-02 22:12:14,415 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'rset\r\n'
2016-02-02 22:12:14,520 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250 OK\r\n'
2016-02-02 22:12:14,535 - WARNING ?-  terminated.
2016-02-02 22:12:16,649 - DEBUG ? ?-  - protocol detected (target port)
2016-02-02 22:12:16,650 - INFO ? ? -  client ('127.0.0.1', 28908) has connected
2016-02-02 22:12:16,650 - INFO ? ? -  connecting to target ('mail.gmx.net', 25)
2016-02-02 22:12:16,820 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'220 gmx.com (mrgmx003) Nemesis ESMTP Service ready\r\n'
2016-02-02 22:12:16,820 - DEBUG ? ?- 
2016-02-02 22:12:17,760 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'ehlo [192.168.139.1]\r\n'
2016-02-02 22:12:17,849 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250 STARTTLS\r\n'
2016-02-02 22:12:17,849 - DEBUG ? ?-  [client] <= [server][mangled] '250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250 AUTH LOGIN PLAIN\r\n'
2016-02-02 22:12:17,871 - WARNING ?-  terminated.
2016-02-02 22:12:20,071 - DEBUG ? ?-  - protocol detected (target port)
2016-02-02 22:12:20,072 - INFO ? ? -  client ('127.0.0.1', 28911) has connected
2016-02-02 22:12:20,072 - INFO ? ? -  connecting to target ('mail.gmx.net', 25)
2016-02-02 22:12:20,239 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'220 gmx.com (mrgmx002) Nemesis ESMTP Service ready\r\n'
2016-02-02 22:12:20,240 - DEBUG ? ?- 
2016-02-02 22:12:21,181 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'ehlo [192.168.139.1]\r\n'
2016-02-02 22:12:21,269 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250 STARTTLS\r\n'
2016-02-02 22:12:21,280 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'STARTTLS\r\n'
2016-02-02 22:12:21,281 - DEBUG ? ?-  [client] <= [server][mangled] '501 Syntax error\r\n'
2016-02-02 22:12:21,281 - DEBUG ? ?-  [client] => [server][mangled] None
2016-02-02 22:12:21,289 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'mail FROM: size=10\r\n'
2016-02-02 22:12:21,381 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'530 Authentication required\r\n'
2016-02-02 22:12:21,386 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'rset\r\n'
2016-02-02 22:12:21,469 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250 OK\r\n'
2016-02-02 22:12:21,485 - WARNING ?-  terminated.
2016-02-02 22:12:23,665 - WARNING ?- Ctrl C - Stopping server
2016-02-02 22:12:23,665 - INFO ? ? - ?-- audit results --
2016-02-02 22:12:23,666 - INFO ? ? - [*] client: 127.0.0.1
2016-02-02 22:12:23,666 - INFO ? ? - ? ? [Vulnerable!] 
2016-02-02 22:12:23,666 - INFO ? ? - ? ? [Vulnerable!] 
2016-02-02 22:12:23,666 - INFO ? ? - ? ? [ ? ? ? ? ? ] 
2016-02-02 22:12:23,666 - INFO ? ? - ? ? [Vulnerable!]

      除了審計模式外還有從服務端剝離starttls、無效化starttls響應、不可行的ssl鏈接（對于客戶端則是不在檢驗服務端的證書是否可信）以及XMPP的追蹤審計的功能。

      介紹內容來自 FreeBuf黑客與極客（FreeBuf.COM）

      ?

      通信協議 加密
      加入交流群
      微信小助手二維碼

      掃碼添加小助手

      加入工程師交流群

      下載該資料的人也在下載 下載該資料的人還在閱讀
      更多 >

      評論

      查看更多

      下載排行

      本周

      1. 1新一代網絡可視化（NPB 2.0）
      2. 3.40 MB  |  1次下載  |  免費
      3. 2冷柜-電氣控制系統講解
      4. 13.68 MB   |  1次下載  |  10 積分
      5. 3MDD品牌三極管MMBT3906數據手冊
      6. 2.33 MB  |  次下載  |  免費
      7. 4MDD品牌三極管S9012數據手冊
      8. 2.62 MB  |  次下載  |  免費
      9. 5LAT1218 如何選擇和設置外部晶體適配 BlueNRG-X
      10. 0.60 MB   |  次下載  |  3 積分
      11. 6LAT1216 Blue NRG-1/2 系列芯片 Flash 操作與 BLE 事件的互斥處理
      12. 0.89 MB   |  次下載  |  3 積分
      13. 7收音環繞擴音機 AVR-1507手冊
      14. 2.50 MB   |  次下載  |  免費
      15. 8MS1000TA 超聲波測量模擬前端芯片技術手冊
      16. 0.60 MB   |  次下載  |  免費

      本月

      1. 1愛華AIWA HS-J202維修手冊
      2. 3.34 MB   |  37次下載  |  免費
      3. 2PC5502負載均流控制電路數據手冊
      4. 1.63 MB   |  23次下載  |  免費
      5. 3NB-IoT芯片廠商的資料說明
      6. 0.31 MB   |  22次下載  |  1 積分
      7. 4UWB653Pro USB口測距通信定位模塊規格書
      8. 838.47 KB  |  5次下載  |  免費
      9. 5蘇泊爾DCL6907(即CHK-S007)單芯片電磁爐原理圖資料
      10. 0.04 MB   |  4次下載  |  1 積分
      11. 6蘇泊爾DCL6909(即CHK-S009)單芯片電磁爐原理圖資料
      12. 0.08 MB   |  2次下載  |  1 積分
      13. 7100W準諧振反激式恒流電源電路圖資料
      14. 0.09 MB   |  2次下載  |  1 積分
      15. 8FS8025B USB的PD和OC快充協議電壓誘騙控制器IC技術手冊
      16. 1.81 MB   |  1次下載  |  免費

      總榜

      1. 1matlab軟件下載入口
      2. 未知  |  935137次下載  |  10 積分
      3. 2開源硬件-PMP21529.1-4 開關降壓/升壓雙向直流/直流轉換器 PCB layout 設計
      4. 1.48MB  |  420064次下載  |  10 積分
      5. 3Altium DXP2002下載入口
      6. 未知  |  233089次下載  |  10 積分
      7. 4電路仿真軟件multisim 10.0免費下載
      8. 340992  |  191439次下載  |  10 積分
      9. 5十天學會AVR單片機與C語言視頻教程 下載
      10. 158M  |  183353次下載  |  10 積分
      11. 6labview8.5下載
      12. 未知  |  81602次下載  |  10 積分
      13. 7Keil工具MDK-Arm免費下載
      14. 0.02 MB  |  73822次下載  |  10 積分
      15. 8LabVIEW 8.6下載
      16. 未知  |  65991次下載  |  10 積分