Narbeh
GitHub
commit
d71bb1531f
482
ssl_checker.py
482
ssl_checker.py
@ -25,284 +25,286 @@ class Clr:
|
|||||||
YELLOW = '\033[33m'
|
YELLOW = '\033[33m'
|
||||||
|
|
||||||
|
|
||||||
def get_cert(host, port, user_args):
|
class SSLChecker:
|
||||||
"""Connection to the host."""
|
|
||||||
if user_args.socks:
|
|
||||||
import socks
|
|
||||||
socks_host, socks_port = filter_hostname(user_args.socks)
|
|
||||||
socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, socks_host, int(socks_port), True)
|
|
||||||
socket.socket = socks.socksocket
|
|
||||||
|
|
||||||
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
def get_cert(self, host, port, user_args):
|
||||||
osobj = SSL.Context(PROTOCOL_TLSv1)
|
"""Connection to the host."""
|
||||||
sock.connect((host, int(port)))
|
if user_args.socks:
|
||||||
oscon = SSL.Connection(osobj, sock)
|
import socks
|
||||||
oscon.set_tlsext_host_name(host.encode())
|
socks_host, socks_port = self.filter_hostname(user_args.socks)
|
||||||
oscon.set_connect_state()
|
socks.setdefaultproxy(socks.PROXY_TYPE_SOCKS5, socks_host, int(socks_port), True)
|
||||||
oscon.do_handshake()
|
socket.socket = socks.socksocket
|
||||||
cert = oscon.get_peer_certificate()
|
|
||||||
sock.close()
|
|
||||||
|
|
||||||
return cert
|
sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
|
||||||
|
osobj = SSL.Context(PROTOCOL_TLSv1)
|
||||||
|
sock.connect((host, int(port)))
|
||||||
|
oscon = SSL.Connection(osobj, sock)
|
||||||
|
oscon.set_tlsext_host_name(host.encode())
|
||||||
|
oscon.set_connect_state()
|
||||||
|
oscon.do_handshake()
|
||||||
|
cert = oscon.get_peer_certificate()
|
||||||
|
sock.close()
|
||||||
|
|
||||||
|
return cert
|
||||||
|
|
||||||
|
|
||||||
def border_msg(message):
|
def border_msg(self, message):
|
||||||
"""Print the message in the box."""
|
"""Print the message in the box."""
|
||||||
row = len(message)
|
row = len(message)
|
||||||
h = ''.join(['+'] + ['-' * row] + ['+'])
|
h = ''.join(['+'] + ['-' * row] + ['+'])
|
||||||
result = h + '\n' "|" + message + "|"'\n' + h
|
result = h + '\n' "|" + message + "|"'\n' + h
|
||||||
print(result)
|
print(result)
|
||||||
|
|
||||||
|
|
||||||
def analyze_ssl(host, context):
|
def analyze_ssl(self, host, context):
|
||||||
"""Analyze the security of the SSL certificate."""
|
"""Analyze the security of the SSL certificate."""
|
||||||
try:
|
try:
|
||||||
from urllib.request import urlopen
|
from urllib.request import urlopen
|
||||||
except ImportError:
|
except ImportError:
|
||||||
from urllib2 import urlopen
|
from urllib2 import urlopen
|
||||||
|
|
||||||
api_url = 'https://api.ssllabs.com/api/v3/'
|
api_url = 'https://api.ssllabs.com/api/v3/'
|
||||||
while True:
|
while True:
|
||||||
main_request = json.loads(urlopen(api_url + 'analyze?host={}'.format(host)).read().decode('utf-8'))
|
main_request = json.loads(urlopen(api_url + 'analyze?host={}'.format(host)).read().decode('utf-8'))
|
||||||
if main_request['status'] in ('DNS', 'IN_PROGRESS'):
|
if main_request['status'] in ('DNS', 'IN_PROGRESS'):
|
||||||
sleep(5)
|
sleep(5)
|
||||||
continue
|
continue
|
||||||
elif main_request['status'] == 'READY':
|
elif main_request['status'] == 'READY':
|
||||||
break
|
break
|
||||||
|
|
||||||
endpoint_data = json.loads(urlopen(api_url + 'getEndpointData?host={}&s={}'.format(
|
endpoint_data = json.loads(urlopen(api_url + 'getEndpointData?host={}&s={}'.format(
|
||||||
host, main_request['endpoints'][0]['ipAddress'])).read().decode('utf-8'))
|
host, main_request['endpoints'][0]['ipAddress'])).read().decode('utf-8'))
|
||||||
|
|
||||||
|
# if the certificate is invalid
|
||||||
|
if endpoint_data['statusMessage'] == 'Certificate not valid for domain name':
|
||||||
|
return context
|
||||||
|
|
||||||
|
context[host]['grade'] = main_request['endpoints'][0]['grade']
|
||||||
|
context[host]['poodle_vuln'] = endpoint_data['details']['poodle']
|
||||||
|
context[host]['heartbleed_vuln'] = endpoint_data['details']['heartbleed']
|
||||||
|
context[host]['heartbeat_vuln'] = endpoint_data['details']['heartbeat']
|
||||||
|
context[host]['freak_vuln'] = endpoint_data['details']['freak']
|
||||||
|
context[host]['logjam_vuln'] = endpoint_data['details']['logjam']
|
||||||
|
context[host]['drownVulnerable'] = endpoint_data['details']['drownVulnerable']
|
||||||
|
|
||||||
# if the certificate is invalid
|
|
||||||
if endpoint_data['statusMessage'] == 'Certificate not valid for domain name':
|
|
||||||
return context
|
return context
|
||||||
|
|
||||||
context[host]['grade'] = main_request['endpoints'][0]['grade']
|
|
||||||
context[host]['poodle_vuln'] = endpoint_data['details']['poodle']
|
|
||||||
context[host]['heartbleed_vuln'] = endpoint_data['details']['heartbleed']
|
|
||||||
context[host]['heartbeat_vuln'] = endpoint_data['details']['heartbeat']
|
|
||||||
context[host]['freak_vuln'] = endpoint_data['details']['freak']
|
|
||||||
context[host]['logjam_vuln'] = endpoint_data['details']['logjam']
|
|
||||||
context[host]['drownVulnerable'] = endpoint_data['details']['drownVulnerable']
|
|
||||||
|
|
||||||
return context
|
def get_cert_sans(self, x509cert):
|
||||||
|
"""
|
||||||
|
Get Subject Alt Names from Certificate. Shameless taken from stack overflow:
|
||||||
|
https://stackoverflow.com/users/4547691/anatolii-chmykhalo
|
||||||
|
"""
|
||||||
|
san = ''
|
||||||
|
ext_count = x509cert.get_extension_count()
|
||||||
|
for i in range(0, ext_count):
|
||||||
|
ext = x509cert.get_extension(i)
|
||||||
|
if 'subjectAltName' in str(ext.get_short_name()):
|
||||||
|
san = ext.__str__()
|
||||||
|
# replace commas to not break csv output
|
||||||
|
san = san.replace(',', ';')
|
||||||
|
return san
|
||||||
|
|
||||||
|
|
||||||
def get_cert_sans(x509cert):
|
def get_cert_info(self, host, cert):
|
||||||
"""
|
"""Get all the information about cert and create a JSON file."""
|
||||||
Get Subject Alt Names from Certificate. Shameless taken from stack overflow:
|
context = {}
|
||||||
https://stackoverflow.com/users/4547691/anatolii-chmykhalo
|
|
||||||
"""
|
cert_subject = cert.get_subject()
|
||||||
san = ''
|
|
||||||
ext_count = x509cert.get_extension_count()
|
context['host'] = host
|
||||||
for i in range(0, ext_count):
|
context['issued_to'] = cert_subject.CN
|
||||||
ext = x509cert.get_extension(i)
|
context['issued_o'] = cert_subject.O
|
||||||
if 'subjectAltName' in str(ext.get_short_name()):
|
context['issuer_c'] = cert.get_issuer().countryName
|
||||||
san = ext.__str__()
|
context['issuer_o'] = cert.get_issuer().organizationName
|
||||||
# replace commas to not break csv output
|
context['issuer_ou'] = cert.get_issuer().organizationalUnitName
|
||||||
san = san.replace(',', ';')
|
context['issuer_cn'] = cert.get_issuer().commonName
|
||||||
return san
|
context['cert_sn'] = str(cert.get_serial_number())
|
||||||
|
context['cert_sha1'] = cert.digest('sha1').decode()
|
||||||
|
context['cert_alg'] = cert.get_signature_algorithm().decode()
|
||||||
|
context['cert_ver'] = cert.get_version()
|
||||||
|
context['cert_sans'] = self.get_cert_sans(cert)
|
||||||
|
context['cert_exp'] = cert.has_expired()
|
||||||
|
|
||||||
|
# Valid from
|
||||||
|
valid_from = datetime.strptime(cert.get_notBefore().decode('ascii'),
|
||||||
|
'%Y%m%d%H%M%SZ')
|
||||||
|
context['valid_from'] = valid_from.strftime('%Y-%m-%d')
|
||||||
|
|
||||||
|
# Valid till
|
||||||
|
valid_till = datetime.strptime(cert.get_notAfter().decode('ascii'),
|
||||||
|
'%Y%m%d%H%M%SZ')
|
||||||
|
context['valid_till'] = valid_till.strftime('%Y-%m-%d')
|
||||||
|
|
||||||
|
# Validity days
|
||||||
|
context['validity_days'] = (valid_till - valid_from).days
|
||||||
|
|
||||||
|
# Validity in days from now
|
||||||
|
now = datetime.now()
|
||||||
|
context['days_left'] = (valid_till - now).days
|
||||||
|
|
||||||
|
return context
|
||||||
|
|
||||||
|
|
||||||
def get_cert_info(host, cert):
|
def print_status(self, host, context, analyze=False):
|
||||||
"""Get all the information about cert and create a JSON file."""
|
"""Print all the usefull info about host."""
|
||||||
context = {}
|
days_left = (datetime.strptime(context[host]['valid_till'], '%Y-%m-%d') - datetime.now()).days
|
||||||
|
|
||||||
cert_subject = cert.get_subject()
|
print('\t{}[+]{} {}\n\t{}'.format(Clr.GREEN, Clr.RST, host, '-' * (len(host) + 5)))
|
||||||
|
print('\t\tIssued domain: {}'.format(context[host]['issued_to']))
|
||||||
|
print('\t\tIssued to: {}'.format(context[host]['issued_o']))
|
||||||
|
print('\t\tIssued by: {} ({})'.format(context[host]['issuer_o'], context[host]['issuer_c']))
|
||||||
|
print('\t\tValid from: {}'.format(context[host]['valid_from']))
|
||||||
|
print('\t\tValid to: {} ({} days left)'.format(context[host]['valid_till'], days_left))
|
||||||
|
print('\t\tValidity days: {}'.format(context[host]['validity_days']))
|
||||||
|
print('\t\tCertificate S/N: {}'.format(context[host]['cert_sn']))
|
||||||
|
print('\t\tCertificate SHA1 FP: {}'.format(context[host]['cert_sha1']))
|
||||||
|
print('\t\tCertificate version: {}'.format(context[host]['cert_ver']))
|
||||||
|
print('\t\tCertificate algorithm: {}'.format(context[host]['cert_alg']))
|
||||||
|
|
||||||
context['host'] = host
|
if analyze and context.get('grade', False): # If analyze part fails
|
||||||
context['issued_to'] = cert_subject.CN
|
print('\t\tCertificate grade: {}'.format(context[host]['grade']))
|
||||||
context['issued_o'] = cert_subject.O
|
print('\t\tPoodle vulnerability: {}'.format(context[host]['poodle_vuln']))
|
||||||
context['issuer_c'] = cert.get_issuer().countryName
|
print('\t\tHeartbleed vulnerability: {}'.format(context[host]['heartbleed_vuln']))
|
||||||
context['issuer_o'] = cert.get_issuer().organizationName
|
print('\t\tHeartbeat vulnerability: {}'.format(context[host]['heartbeat_vuln']))
|
||||||
context['issuer_ou'] = cert.get_issuer().organizationalUnitName
|
print('\t\tFreak vulnerability: {}'.format(context[host]['freak_vuln']))
|
||||||
context['issuer_cn'] = cert.get_issuer().commonName
|
print('\t\tLogjam vulnerability: {}'.format(context[host]['logjam_vuln']))
|
||||||
context['cert_sn'] = str(cert.get_serial_number())
|
print('\t\tDrown vulnerability: {}'.format(context[host]['drownVulnerable']))
|
||||||
context['cert_sha1'] = cert.digest('sha1').decode()
|
|
||||||
context['cert_alg'] = cert.get_signature_algorithm().decode()
|
|
||||||
context['cert_ver'] = cert.get_version()
|
|
||||||
context['cert_sans'] = get_cert_sans(cert)
|
|
||||||
context['cert_exp'] = cert.has_expired()
|
|
||||||
|
|
||||||
# Valid from
|
print('\t\tExpired: {}'.format(context[host]['cert_exp']))
|
||||||
valid_from = datetime.strptime(cert.get_notBefore().decode('ascii'),
|
print('\t\tCertificate SAN\'s: ')
|
||||||
'%Y%m%d%H%M%SZ')
|
|
||||||
context['valid_from'] = valid_from.strftime('%Y-%m-%d')
|
|
||||||
|
|
||||||
# Valid till
|
for san in context[host]['cert_sans'].split(';'):
|
||||||
valid_till = datetime.strptime(cert.get_notAfter().decode('ascii'),
|
print('\t\t \\_ {}'.format(san.strip()))
|
||||||
'%Y%m%d%H%M%SZ')
|
|
||||||
context['valid_till'] = valid_till.strftime('%Y-%m-%d')
|
|
||||||
|
|
||||||
# Validity days
|
print('\n')
|
||||||
context['validity_days'] = (valid_till - valid_from).days
|
|
||||||
|
|
||||||
# Validity in days from now
|
|
||||||
now = datetime.now()
|
|
||||||
context['days_left'] = (valid_till - now).days
|
|
||||||
|
|
||||||
return context
|
|
||||||
|
|
||||||
|
|
||||||
def print_status(host, context, analyze=False):
|
def show_result(self, user_args):
|
||||||
"""Print all the usefull info about host."""
|
"""Get the context."""
|
||||||
days_left = (datetime.strptime(context[host]['valid_till'], '%Y-%m-%d') - datetime.now()).days
|
context = {}
|
||||||
|
failed_cnt = 0
|
||||||
|
start_time = datetime.now()
|
||||||
|
hosts = user_args.hosts
|
||||||
|
|
||||||
print('\t{}[+]{} {}\n\t{}'.format(Clr.GREEN, Clr.RST, host, '-' * (len(host) + 5)))
|
if not user_args.json_true:
|
||||||
print('\t\tIssued domain: {}'.format(context[host]['issued_to']))
|
self.border_msg(' Analyzing {} host(s) '.format(len(hosts)))
|
||||||
print('\t\tIssued to: {}'.format(context[host]['issued_o']))
|
|
||||||
print('\t\tIssued by: {} ({})'.format(context[host]['issuer_o'], context[host]['issuer_c']))
|
|
||||||
print('\t\tValid from: {}'.format(context[host]['valid_from']))
|
|
||||||
print('\t\tValid to: {} ({} days left)'.format(context[host]['valid_till'], days_left))
|
|
||||||
print('\t\tValidity days: {}'.format(context[host]['validity_days']))
|
|
||||||
print('\t\tCertificate S/N: {}'.format(context[host]['cert_sn']))
|
|
||||||
print('\t\tCertificate SHA1 FP: {}'.format(context[host]['cert_sha1']))
|
|
||||||
print('\t\tCertificate version: {}'.format(context[host]['cert_ver']))
|
|
||||||
print('\t\tCertificate algorithm: {}'.format(context[host]['cert_alg']))
|
|
||||||
|
|
||||||
if analyze and context.get('grade', False): # If analyze part fails
|
if not user_args.json_true and user_args.analyze:
|
||||||
print('\t\tCertificate grade: {}'.format(context[host]['grade']))
|
print('{}Warning: -a/--analyze is enabled. It takes more time...{}\n'.format(Clr.YELLOW, Clr.RST))
|
||||||
print('\t\tPoodle vulnerability: {}'.format(context[host]['poodle_vuln']))
|
|
||||||
print('\t\tHeartbleed vulnerability: {}'.format(context[host]['heartbleed_vuln']))
|
|
||||||
print('\t\tHeartbeat vulnerability: {}'.format(context[host]['heartbeat_vuln']))
|
|
||||||
print('\t\tFreak vulnerability: {}'.format(context[host]['freak_vuln']))
|
|
||||||
print('\t\tLogjam vulnerability: {}'.format(context[host]['logjam_vuln']))
|
|
||||||
print('\t\tDrown vulnerability: {}'.format(context[host]['drownVulnerable']))
|
|
||||||
|
|
||||||
print('\t\tExpired: {}'.format(context[host]['cert_exp']))
|
for host in hosts:
|
||||||
print('\t\tCertificate SAN\'s: ')
|
host, port = self.filter_hostname(host)
|
||||||
|
|
||||||
for san in context[host]['cert_sans'].split(';'):
|
# Check duplication
|
||||||
print('\t\t \\_ {}'.format(san.strip()))
|
if host in context.keys():
|
||||||
|
continue
|
||||||
|
|
||||||
print('\n')
|
try:
|
||||||
|
cert = self.get_cert(host, port, user_args)
|
||||||
|
context[host] = self.get_cert_info(host, cert)
|
||||||
|
context[host]['tcp_port'] = int(port)
|
||||||
|
|
||||||
|
# Analyze the certificate if enabled
|
||||||
|
if user_args.analyze:
|
||||||
|
context = self.analyze_ssl(host, context)
|
||||||
|
|
||||||
|
if not user_args.json_true:
|
||||||
|
self.print_status(host, context, user_args.analyze)
|
||||||
|
except SSL.SysCallError:
|
||||||
|
if not user_args.json_true:
|
||||||
|
print('\t{}[-]{} {:<20s} Failed: Misconfigured SSL/TLS\n'.format(Clr.RED, Clr.RST, host))
|
||||||
|
failed_cnt += 1
|
||||||
|
except Exception as error:
|
||||||
|
if not user_args.json_true:
|
||||||
|
print('\t{}[-]{} {:<20s} Failed: {}\n'.format(Clr.RED, Clr.RST, host, error))
|
||||||
|
failed_cnt += 1
|
||||||
|
except KeyboardInterrupt:
|
||||||
|
print('{}Canceling script...{}\n'.format(Clr.YELLOW, Clr.RST))
|
||||||
|
sys.exit(1)
|
||||||
|
|
||||||
|
if not user_args.json_true:
|
||||||
|
self.border_msg(' Successful: {} | Failed: {} | Duration: {} '.format(
|
||||||
|
len(hosts) - failed_cnt, failed_cnt, datetime.now() - start_time))
|
||||||
|
|
||||||
|
# CSV export if -c/--csv is specified
|
||||||
|
if user_args.csv_enabled:
|
||||||
|
self.export_csv(context, user_args.csv_enabled)
|
||||||
|
|
||||||
|
# Enable JSON output if -j/--json argument specified
|
||||||
|
if user_args.json_true:
|
||||||
|
print(json.dumps(context))
|
||||||
|
|
||||||
|
if user_args.json_save_true:
|
||||||
|
for host in context.keys():
|
||||||
|
with open(host + '.json', 'w', encoding='UTF-8') as fp:
|
||||||
|
fp.write(json.dumps(context[host]))
|
||||||
|
|
||||||
|
|
||||||
def show_result(user_args):
|
def export_csv(self, context, filename):
|
||||||
"""Get the context."""
|
"""Export all context results to CSV file."""
|
||||||
context = {}
|
# prepend dict keys to write column headers
|
||||||
failed_cnt = 0
|
with open(filename, 'w') as csv_file:
|
||||||
start_time = datetime.now()
|
csv_writer = DictWriter(csv_file, list(context.items())[0][1].keys())
|
||||||
hosts = user_args.hosts
|
csv_writer.writeheader()
|
||||||
|
for host in context.keys():
|
||||||
if not user_args.json_true:
|
csv_writer.writerow(context[host])
|
||||||
border_msg(' Analyzing {} host(s) '.format(len(hosts)))
|
|
||||||
|
|
||||||
if not user_args.json_true and user_args.analyze:
|
|
||||||
print('{}Warning: -a/--analyze is enabled. It takes more time...{}\n'.format(Clr.YELLOW, Clr.RST))
|
|
||||||
|
|
||||||
for host in hosts:
|
|
||||||
host, port = filter_hostname(host)
|
|
||||||
|
|
||||||
# Check duplication
|
|
||||||
if host in context.keys():
|
|
||||||
continue
|
|
||||||
|
|
||||||
try:
|
|
||||||
cert = get_cert(host, port, user_args)
|
|
||||||
context[host] = get_cert_info(host, cert)
|
|
||||||
context[host]['tcp_port'] = int(port)
|
|
||||||
|
|
||||||
# Analyze the certificate if enabled
|
|
||||||
if user_args.analyze:
|
|
||||||
context = analyze_ssl(host, context)
|
|
||||||
|
|
||||||
if not user_args.json_true:
|
|
||||||
print_status(host, context, user_args.analyze)
|
|
||||||
except SSL.SysCallError:
|
|
||||||
if not user_args.json_true:
|
|
||||||
print('\t{}[-]{} {:<20s} Failed: Misconfigured SSL/TLS\n'.format(Clr.RED, Clr.RST, host))
|
|
||||||
failed_cnt += 1
|
|
||||||
except Exception as error:
|
|
||||||
if not user_args.json_true:
|
|
||||||
print('\t{}[-]{} {:<20s} Failed: {}\n'.format(Clr.RED, Clr.RST, host, error))
|
|
||||||
failed_cnt += 1
|
|
||||||
except KeyboardInterrupt:
|
|
||||||
print('{}Canceling script...{}\n'.format(Clr.YELLOW, Clr.RST))
|
|
||||||
sys.exit(1)
|
|
||||||
|
|
||||||
if not user_args.json_true:
|
|
||||||
border_msg(' Successful: {} | Failed: {} | Duration: {} '.format(
|
|
||||||
len(hosts) - failed_cnt, failed_cnt, datetime.now() - start_time))
|
|
||||||
|
|
||||||
# CSV export if -c/--csv is specified
|
|
||||||
if user_args.csv_enabled:
|
|
||||||
export_csv(context, user_args.csv_enabled)
|
|
||||||
|
|
||||||
# Enable JSON output if -j/--json argument specified
|
|
||||||
if user_args.json_true:
|
|
||||||
print(json.dumps(context))
|
|
||||||
|
|
||||||
if user_args.json_save_true:
|
|
||||||
for host in context.keys():
|
|
||||||
with open(host + '.json', 'w', encoding='UTF-8') as fp:
|
|
||||||
fp.write(json.dumps(context[host]))
|
|
||||||
|
|
||||||
|
|
||||||
def export_csv(context, filename):
|
def filter_hostname(self, host):
|
||||||
"""Export all context results to CSV file."""
|
"""Remove unused characters and split by address and port."""
|
||||||
# prepend dict keys to write column headers
|
host = host.replace('http://', '').replace('https://', '').replace('/', '')
|
||||||
with open(filename, 'w') as csv_file:
|
port = 443
|
||||||
csv_writer = DictWriter(csv_file, list(context.items())[0][1].keys())
|
if ':' in host:
|
||||||
csv_writer.writeheader()
|
host, port = host.split(':')
|
||||||
for host in context.keys():
|
|
||||||
csv_writer.writerow(context[host])
|
return host, port
|
||||||
|
|
||||||
|
|
||||||
def filter_hostname(host):
|
def get_args(self):
|
||||||
"""Remove unused characters and split by address and port."""
|
"""Set argparse options."""
|
||||||
host = host.replace('http://', '').replace('https://', '').replace('/', '')
|
parser = ArgumentParser(prog='ssl_checker.py', add_help=False,
|
||||||
port = 443
|
description="""Collects useful information about given host's SSL certificates.""")
|
||||||
if ':' in host:
|
|
||||||
host, port = host.split(':')
|
|
||||||
|
|
||||||
return host, port
|
group = parser.add_mutually_exclusive_group(required=True)
|
||||||
|
group.add_argument('-H', '--host', dest='hosts', nargs='*',
|
||||||
|
required=False, help='Hosts as input separated by space')
|
||||||
|
group.add_argument('-f', '--host-file', dest='host_file',
|
||||||
|
required=False, help='Hosts as input from file')
|
||||||
|
parser.add_argument('-s', '--socks', dest='socks',
|
||||||
|
default=False, metavar='HOST:PORT',
|
||||||
|
help='Enable SOCKS proxy for connection')
|
||||||
|
parser.add_argument('-c', '--csv', dest='csv_enabled',
|
||||||
|
default=False, metavar='FILENAME.CSV',
|
||||||
|
help='Enable CSV file export')
|
||||||
|
parser.add_argument('-j', '--json', dest='json_true',
|
||||||
|
action='store_true', default=False,
|
||||||
|
help='Enable JSON in the output')
|
||||||
|
parser.add_argument('-J', '--json-save', dest='json_save_true',
|
||||||
|
action='store_true', default=False,
|
||||||
|
help='Enable JSON export individually per host')
|
||||||
|
parser.add_argument('-a', '--analyze', dest='analyze',
|
||||||
|
default=False, action='store_true',
|
||||||
|
help='Enable SSL security analysis on the host')
|
||||||
|
parser.add_argument('-h', '--help', default=SUPPRESS,
|
||||||
|
action='help',
|
||||||
|
help='Show this help message and exit')
|
||||||
|
|
||||||
|
args = parser.parse_args()
|
||||||
|
|
||||||
def get_args():
|
# Get hosts from file if provided
|
||||||
"""Set argparse options."""
|
if args.host_file:
|
||||||
parser = ArgumentParser(prog='ssl_checker.py', add_help=False,
|
with open(args.host_file) as f:
|
||||||
description="""Collects useful information about given host's SSL certificates.""")
|
args.hosts = f.read().splitlines()
|
||||||
|
|
||||||
group = parser.add_mutually_exclusive_group(required=True)
|
# Checks hosts list
|
||||||
group.add_argument('-H', '--host', dest='hosts', nargs='*',
|
if isinstance(args.hosts, list):
|
||||||
required=False, help='Hosts as input separated by space')
|
if len(args.hosts) == 0:
|
||||||
group.add_argument('-f', '--host-file', dest='host_file',
|
parser.print_help()
|
||||||
required=False, help='Hosts as input from file')
|
sys.exit(0)
|
||||||
parser.add_argument('-s', '--socks', dest='socks',
|
|
||||||
default=False, metavar='HOST:PORT',
|
|
||||||
help='Enable SOCKS proxy for connection')
|
|
||||||
parser.add_argument('-c', '--csv', dest='csv_enabled',
|
|
||||||
default=False, metavar='FILENAME.CSV',
|
|
||||||
help='Enable CSV file export')
|
|
||||||
parser.add_argument('-j', '--json', dest='json_true',
|
|
||||||
action='store_true', default=False,
|
|
||||||
help='Enable JSON in the output')
|
|
||||||
parser.add_argument('-J', '--json-save', dest='json_save_true',
|
|
||||||
action='store_true', default=False,
|
|
||||||
help='Enable JSON export individually per host')
|
|
||||||
parser.add_argument('-a', '--analyze', dest='analyze',
|
|
||||||
default=False, action='store_true',
|
|
||||||
help='Enable SSL security analysis on the host')
|
|
||||||
parser.add_argument('-h', '--help', default=SUPPRESS,
|
|
||||||
action='help',
|
|
||||||
help='Show this help message and exit')
|
|
||||||
|
|
||||||
args = parser.parse_args()
|
|
||||||
|
|
||||||
# Get hosts from file if provided
|
|
||||||
if args.host_file:
|
|
||||||
with open(args.host_file) as f:
|
|
||||||
args.hosts = f.read().splitlines()
|
|
||||||
|
|
||||||
# Checks hosts list
|
|
||||||
if isinstance(args.hosts, list):
|
|
||||||
if len(args.hosts) == 0:
|
|
||||||
parser.print_help()
|
|
||||||
sys.exit(0)
|
|
||||||
|
|
||||||
return args
|
|
||||||
|
|
||||||
|
return args
|
||||||
|
|
||||||
if __name__ == '__main__':
|
if __name__ == '__main__':
|
||||||
show_result(get_args())
|
SSLCheckerObject = SSLChecker()
|
||||||
|
SSLCheckerObject.show_result(SSLCheckerObject.get_args())
|
||||||
|
|||||||
Loading…
x
Reference in New Issue
Block a user