PenTest/nmap
1
0
Fork 0
mirror of https://github.com/nmap/nmap.git synced 2026-01-02 12:59:02 +00:00
Code Issues Projects Releases Wiki Activity

Allow scripts to set record protocol version via tls.client_hello

Browse Source
This commit is contained in:
dmiller
2017-02-24 15:47:49 +00:00
parent 6f8ec39063
commit 21553bebb9
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
nselib/tls.lua
View File

@@ -1384,7 +1384,8 @@ end
-- Build a client_hello message
--
-- The options table has the following keys:
-- * <code>"protocol"</code> - The TLS protocol version string
-- * <code>"protocol"</code> - The TLS protocol version string for the client_hello. This indicates the highest protocol version supported.
-- * <code>"record_protocol"</code> - The TLS protocol version string for the TLS record. This indicates the lowest protocol version supported.
-- * <code>"ciphers"</code> - a table containing the cipher suite names. Defaults to the NULL cipher
-- * <code>"compressors"</code> - a table containing the compressor names. Default: NULL
-- * <code>"extensions"</code> - a table containing the extension names. Default: no extensions
@@ -1487,7 +1488,7 @@ function client_hello(t)
table.insert(h, pack(">s3", b))
-- Record layer version should be SSLv3 (lowest compatible record version)
return record_write("handshake", "SSLv3", table.concat(h))
return record_write("handshake", t.record_protocol or "SSLv3", table.concat(h))
end
local function read_atleast(s, n)