rex-sslscan 0.1.11 → 0.1.13

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8593a788aa36c595e9936c33d90d2a48282b632efc2ed0f3966db93d61df578b
-  data.tar.gz: 6c794c17add000880b50c1753272bb600c292e06fc836fd8658964e1fa67e4e3
+  metadata.gz: cef4452d76a846d5eba655bd26b54eaf4dc395c460159dbc63513cf2132cc849
+  data.tar.gz: 22297a7682033968b7289572fa14744b18c93a7adc5a83f107739741587dc05b
 SHA512:
-  metadata.gz: cb49794b07b6f990c922656dc0f08187938e7ef9ba8575e0464af7c1283f85ca5fcc050d2c4eb7310fee5eb89e0217f326e13cdb20b8bf740a826589eb030425
-  data.tar.gz: 6556269149dff34f5fad35a384e55d8ef7fd24437c563a61e26a83fea1d423ae88a9884b99d7435f3b5a1e68c6d9e3749cfbef8bd21a1c4411854147cd23059c
+  metadata.gz: 02dc4ff4d97bf79b3b7a098c010583933d12ab241c9b84929bec7888c90d75a75dbee9e5038b68fea4dbe8236e99e0d2d825067e76ab71cf4a07564a3c3ea9fc
+  data.tar.gz: b4678f9fe1770c3374c8601d3bc5d7128edb347b86f424655fb9c93b498f635f6b16507929685e5b555dddfb042076604962347c37095ec0a027820f9faabc6b

data/.github/workflows/verify.yml

@@ -9,44 +9,5 @@ on:
       - '*'
 
 jobs:
-  test:
-    runs-on: ${{ matrix.os }}
-    timeout-minutes: 40
-
-    strategy:
-      fail-fast: true
-      matrix:
-        ruby:
-          - '2.7'
-          - '3.0'
-          - '3.1'
-          - '3.2'
-        os:
-          - ubuntu-20.04
-          - ubuntu-latest
-        exclude:
-          - { os: ubuntu-latest, ruby: '2.7' }
-          - { os: ubuntu-latest, ruby: '3.0' }
-        test_cmd:
-          - bundle exec rspec
-
-    env:
-      RAILS_ENV: test
-
-    name: ${{ matrix.os }} - Ruby ${{ matrix.ruby }} - ${{ matrix.test_cmd }}
-    steps:
-      - name: Checkout code
-        uses: actions/checkout@v2
-
-      - name: Setup Ruby
-        uses: ruby/setup-ruby@v1
-        with:
-          ruby-version: ${{ matrix.ruby }}
-          bundler-cache: true
-
-      - name: ${{ matrix.test_cmd }}
-        run: |
-          echo "${CMD}"
-          bash -c "${CMD}"
-        env:
-          CMD: ${{ matrix.test_cmd }}
+  build:
+    uses: rapid7/metasploit-framework/.github/workflows/shared_gem_verify.yml@master

data/README.md

@@ -23,6 +23,8 @@ Or install it yourself as:
 ## Usage
 
 ```
+require 'rex-sslscan'
+
 scanner = Rex::SSLScan::Scanner.new('192.168.1.1', 443)
 results = scanner.scan
 print_status results.to_s

data/lib/rex/sslscan/scanner.rb

@@ -16,17 +16,20 @@ class Scanner
 
   attr_reader :supported_versions
   attr_reader :sslv2
+  attr_reader :tls_server_name_indication
 
   # Initializes the scanner object
   # @param host [String] IP address or hostname to scan
   # @param port [Integer] Port number to scan, default: 443
   # @param timeout [Integer] Timeout for connections, in seconds. default: 5
+  # @param tls_server_name_indication [String,nil] TLS Server Name Indication (SNI)
   # @raise [StandardError] Raised when the configuration is invalid
-  def initialize(host,port = 443,context = {},timeout=5)
+  def initialize(host,port = 443,context = {},timeout=5,tls_server_name_indication: nil)
     @host       = host
     @port       = port
     @timeout    = timeout
     @context    = context
+    @tls_server_name_indication = tls_server_name_indication
     if check_opensslv2 == true
       @supported_versions = [:SSLv2, :SSLv3, :TLSv1, :TLSv1_1, :TLSv1_2]
       @sslv2 = true
@@ -55,7 +58,7 @@ class Scanner
     scan_result.openssl_sslv2 = sslv2
     # If we can't get any SSL connection, then don't bother testing
     # individual ciphers.
-    if test_ssl == :rejected and test_tls == :rejected
+    if test_ssl == :rejected and test_tls(versions: supported_tls_versions) == :rejected
       return scan_result
     end
 
@@ -106,24 +109,29 @@ class Scanner
     return :accepted
   end
 
-  def test_tls
-    begin
-      scan_client = Rex::Socket::Tcp.create(
-        'Context'    => @context,
-        'PeerHost'   => @host,
-        'PeerPort'   => @port,
-        'SSL'        => true,
-        'SSLVersion' => :TLSv1,
-        'Timeout'    => @timeout
-      )
-    rescue ::Exception => e
-      return :rejected
-    ensure
-      if scan_client
-        scan_client.close
+  def test_tls(versions: [:TLSv1])
+    supported_version = versions.find do |version|
+      begin
+        scan_client = Rex::Socket::Tcp.create(
+          'Context'    => @context,
+          'PeerHost'   => @host,
+          'PeerPort'   => @port,
+          'PeerHostname' => @tls_server_name_indication,
+          'SSL'        => true,
+          'SSLVersion' => version,
+          'Timeout'    => @timeout
+        )
+        version
+      rescue ::Exception => e
+        nil
+      ensure
+        if scan_client
+          scan_client.close
+        end
       end
     end
-    return :accepted
+
+    supported_version ? :accepted : :rejected
   end
 
   # Tests the specified SSL Version and Cipher against the configured target
@@ -137,6 +145,7 @@ class Scanner
         'Context'    => @context,
         'PeerHost'   => @host,
         'PeerPort'   => @port,
+        'PeerHostname' => @tls_server_name_indication,
         'SSL'        => true,
         'SSLVersion' => ssl_version,
         'SSLCipher'  => cipher,
@@ -164,6 +173,7 @@ class Scanner
       scan_client = Rex::Socket::Tcp.create(
         'PeerHost'   => @host,
         'PeerPort'   => @port,
+        'PeerHostname' => @tls_server_name_indication,
         'SSL'        => true,
         'SSLVersion' => ssl_version,
         'SSLCipher'  => cipher,
@@ -187,6 +197,10 @@ class Scanner
 
   protected
 
+  def supported_tls_versions
+    @supported_versions.select { |v| v.to_s.start_with?('TLS') }
+  end
+
   # Validates that the SSL Version and Cipher are valid both seperately and
   # together as part of an SSL Context.
   # @param ssl_version [Symbol] The SSL version to use (:SSLv2,  :SSLv3, :TLSv1)

data/lib/rex/sslscan/version.rb

@@ -1,5 +1,5 @@
 module Rex
   module Sslscan
-    VERSION = "0.1.11"
+    VERSION = "0.1.13"
   end
 end

metadata

@@ -1,39 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rex-sslscan
 version: !ruby/object:Gem::Version
-  version: 0.1.11
+  version: 0.1.13
 platform: ruby
 authors:
 - Metasploit Hackers
+autorequire:
 bindir: exe
-cert_chain:
-- |
-  -----BEGIN CERTIFICATE-----
-  MIIERDCCAqygAwIBAgIBATANBgkqhkiG9w0BAQsFADAmMSQwIgYDVQQDDBttc2Zk
-  ZXYvREM9bWV0YXNwbG9pdC9EQz1jb20wHhcNMjMxMDMwMTYwNDI1WhcNMjUxMDI5
-  MTYwNDI1WjAmMSQwIgYDVQQDDBttc2ZkZXYvREM9bWV0YXNwbG9pdC9EQz1jb20w
-  ggGiMA0GCSqGSIb3DQEBAQUAA4IBjwAwggGKAoIBgQDZN/EKv+yVjwiKWvjAVhjF
-  aWNYI0E9bJ5d1qKd29omRYX9a+OOKBCu5+394fyF5RjwU4mYGr2iopX9ixRJrWXH
-  ojs70tEvV1CmvP9rhz7JKzQQoJOkinrz4d+StIylxVxVdgm7DeiB3ruTwvl7qKUv
-  piWzhrBFiVU6XIEAwq6wNEmnv2D+Omyf4h0Tf99hc6G0QmBnU3XydqvnZ+AzUbBV
-  24RH3+NQoigLbvK4M5aOeYhk19di58hznebOw6twHzNczshrBeMFQp985ScNgsvF
-  rL+7HNNwpcpngERwZfzDNn7iYN5X3cyvTcykShtsuPMa5zXsYo42LZrsTF87DW38
-  D8sxL6Dgdqu25Mltdw9m+iD4rHSfb1KJYEoNO+WwBJLO2Y4d6G1CR66tVeWsZspb
-  zneOVC+sDuil7hOm+6a7Y2yrrRyT6IfL/07DywjPAIRUp5+Jn8ZrkWRNo2AOwWBG
-  k5gz7SfJPHuyVnPlxoMA0MTFCUnnnbyHu882TGoJGgMCAwEAAaN9MHswCQYDVR0T
-  BAIwADALBgNVHQ8EBAMCBLAwHQYDVR0OBBYEFIQfNa4E889ZE334cwU7eNu2hScH
-  MCAGA1UdEQQZMBeBFW1zZmRldkBtZXRhc3Bsb2l0LmNvbTAgBgNVHRIEGTAXgRVt
-  c2ZkZXZAbWV0YXNwbG9pdC5jb20wDQYJKoZIhvcNAQELBQADggGBAMfzvKcV27p7
-  pctmpW2JmIXLMrjNLyGJAxELH/t9pJueXdga7uj2fJkYQDbwGw5x4MGyFqhqJLH4
-  l/qsUF3PyAXDTSWLVaqXQVWO+IIHxecG0XjPXTNudzMU0hzqbqiBKvsW7/a3V5BP
-  SWlFzrFkoXWlPouFpoakyYMJjpW4SGdPzRv7pM4OhXtkXpHiRvx5985FrHgHlI89
-  NSIuIUbp8zqk4hP1i9MV0Lc/vTf2gOmo+RHnjqG1NiYfMCYyY/Mcd4W36kGOl468
-  I8VDTwgCufkAzFu7BJ5yCOueqtDcuq+d3YhAyU7NI4+Ja8EwazOnB+07sWhKpg7z
-  yuQ1mWYPmZfVQpoSVv1CvXsoqJYXVPBBLOacKKSj8ArVG6pPn9Bej7IOQdblaFjl
-  DgscAao7wB3xW2BWEp1KnaDWkf1x9ttgoBEYyuYwU7uatB67kBQG1PKvLt79wHvz
-  Dxs+KOjGbBRfMnPgVGYkORKVrZIwlaboHbDKxcVW5xv+oZc7KYXWGg==
-  -----END CERTIFICATE-----
-date: 2025-02-13 00:00:00.000000000 Z
+cert_chain: []
+date: 2025-05-10 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rake
@@ -133,6 +108,7 @@ files:
 homepage: https://github.com/rapid7/rex-sslscan
 licenses: []
 metadata: {}
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -147,7 +123,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.3
+rubygems_version: 3.4.19
+signing_key:
 specification_version: 4
 summary: Ruby Exploitation(REX) Library for scanning the SSL/TLS capabilities of a
   server

checksums.yaml.gz.sig

@@ -1 +0,0 @@
-hBRD������ #�1��1�+o�_7�m���f�S������P�8���u��SsB'8*/�N�)fP��Ec���$;<�C�n;%�7;��,)�����\�KA/�	�������1p����nu�u�!:�yTv��od(�Hp���
Y
-_ˈ�8y��V�s�8���