Skip to content

Commit 6ab3478

Browse files
author
gigstorm
committed
Update to include SSL Version 3 protocol
SSL Version 3 will also respond to this and a server configured to respond to SSL version 3 but not TLS will show false negative without this option (proven). May need to update cipher suites to include this option.
1 parent 6599999 commit 6ab3478

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

modules/auxiliary/scanner/ssl/openssl_heartbleed.rb

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -69,6 +69,7 @@ class Metasploit3 < Msf::Auxiliary
6969
HEARTBEAT_RECORD_TYPE = 0x18
7070
ALERT_RECORD_TYPE = 0x15
7171
TLS_VERSION = {
72+
'3.0' => 0x0300,
7273
'1.0' => 0x0301,
7374
'1.1' => 0x0302,
7475
'1.2' => 0x0303
@@ -121,7 +122,7 @@ def initialize
121122
[
122123
Opt::RPORT(443),
123124
OptEnum.new('STARTTLS', [true, 'Protocol to use with STARTTLS, None to avoid STARTTLS ', 'None', [ 'None', 'SMTP', 'IMAP', 'JABBER', 'POP3', 'FTP' ]]),
124-
OptEnum.new('TLSVERSION', [true, 'TLS version to use', '1.0', ['1.0', '1.1', '1.2']]),
125+
OptEnum.new('TLSVERSION', [true, 'TLS/SSL version to use', '1.0', ['SSLv3','1.0', '1.1', '1.2']]),
125126
OptBool.new('STOREDUMP', [true, 'Store leaked memory in a file', false]),
126127
OptRegexp.new('DUMPFILTER', [false, 'Pattern to filter leaked memory before storing', nil])
127128
], self.class)

0 commit comments

Comments
 (0)