Skip to content

Adds network capture decryption support to http scanners #20080

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
sjanusz-r7 merged 1 commit into from
May 1, 2025
Merged

Adds network capture decryption support to http scanners #20080

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 3 additions & 1 deletion lib/metasploit/framework/login_scanner/http.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -334,6 +334,7 @@ def create_client(opts)
rport = opts['rport'] || port
cli_ssl = opts['ssl'] || ssl
cli_ssl_version = opts['ssl_version'] || ssl_version
cli_sslkeylogfile = opts['SSLKeyLogFile'] || sslkeylogfile
cli_proxies = opts['proxies'] || proxies
username = opts['credential'] ? opts['credential'].public : http_username
password = opts['credential'] ? opts['credential'].private : http_password
Expand All @@ -357,7 +358,8 @@ def create_client(opts)
username,
password,
kerberos_authenticator: kerberos_authenticator,
subscriber: http_logger_subscriber
subscriber: http_logger_subscriber,
sslkeylogfile: cli_sslkeylogfile
)
configure_http_client(cli)

Expand Down
3 changes: 3 additions & 0 deletions lib/metasploit/framework/login_scanner/rex_socket.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,9 @@ module RexSocket
# @!attribute ssl_verify_mode
# @return [String] the SSL certification verification mechanism
attr_accessor :ssl_verify_mode
# @!attribute sslkeylogfile
# @return [String, nil] The SSL key log file path
attr_accessor :sslkeylogfile
# @!attribute ssl_cipher
# @return [String] The SSL cipher to use for the context
attr_accessor :ssl_cipher
Expand Down
1 change: 1 addition & 0 deletions lib/msf/core/auxiliary/login_scanner.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ def configure_login_scanner(conf)
proxies: datastore['Proxies'],
stop_on_success: datastore['STOP_ON_SUCCESS'],
bruteforce_speed: datastore['BRUTEFORCE_SPEED'],
sslkeylogfile: datastore['SSLKeyLogFile'],
framework: framework,
framework_module: self,
local_port: datastore['CPORT'],
Expand Down
2 changes: 1 addition & 1 deletion lib/rex/proto/http/client.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -184,7 +184,7 @@ def connect(t = -1)
'Context' => context,
'SSL' => ssl,
'SSLVersion' => ssl_version,
'SSLKeyLogFile' => sslkeylogfile,
'SSLKeyLogFile' => config['SSLKeyLogFile'] || sslkeylogfile,
'Proxies' => proxies,
'Timeout' => timeout,
'Comm' => comm
Expand Down