Adds network capture decryption support for login scanners#20099
Closed
cgranleese-r7 wants to merge 1 commit intorapid7:masterfrom
Closed
Adds network capture decryption support for login scanners#20099cgranleese-r7 wants to merge 1 commit intorapid7:masterfrom
cgranleese-r7 wants to merge 1 commit intorapid7:masterfrom
Conversation
cgranleese-r7
force-pushed
the
adds-more-support-for-network-capture-decryption
branch
from
a042ece to
c8c05b8
Compare
cgranleese-r7
force-pushed
the
adds-more-support-for-network-capture-decryption
branch
from
c8c05b8 to
979f398
Compare
…for-network-capture-decryption Adds network capture decryption support to http scanners
cgranleese-r7
force-pushed
the
adds-more-support-for-network-capture-decryption
branch
from
979f398 to
319395e
Compare
Contributor
Author
|
Closing in favor off #20115 |
5 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This pull request adds enhanced support for network capture decryption for login scanner modules. By writing to the
sslkeylogfileit enables network capture decryption which is useful to decrypt TLS traffic in Wireshark.This is a follow on to #20024, #20080 and rapid7/rex-socket#74.
Testing
Tested against the following modules:
scanner/acpp/loginscanner/ftp/ftp_loginscanner/mysql/mysql_loginscanner/afp/afp_loginscanner/db2/db2_authscanner/mqtt/connectscanner/pop3/pop3_loginscanner/telnet/brocade_enable_loginscanner/telnet/telnet_loginscanner/vmware/vmauthd_loginscanner/vnc/vnc_loginscanner/mssql/mssql_loginVerification
msfconsolescanner/*/*_loginmodules.ls -laand you should now see a file calledsslkeylogfile.txt