Skip to content

Commit b124b56

Browse files
committed
Added nmap scan and updated README
1 parent 996134f commit b124b56

File tree

3 files changed

+16
-7
lines changed

3 files changed

+16
-7
lines changed

Sweet32_Birthday/Birthday_test.sh

+10-1
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,18 @@
22
#Author: Gilles Biagomba
33
#Program: Birthday_test.sh
44
#Description: This script was design check for CVE-2016-2183, CVE-2016-6329.\n
5-
# Or aka Sweet32: Birthday attacks on 64-bit block ciphers in TLS and OpenVPN.\n
5+
# Or aka Sweet32: Birthday attacks on 64-bit block ciphers in TLS/SSL and OpenVPN.\n
66
# https://sweet32.info/ \n
77

8+
9+
# Nmap Scan
10+
echo "--------------------------------------------------"
11+
echo "Performing the SSL scan using Nmap"
12+
echo "--------------------------------------------------"
13+
nmap -A -F -Pn -R -sS -sU -sV --script=ssl-enum-ciphers,vulners -iL targets -oA Swett_Thirty-two
14+
xsltproc Swett_Thirty-two.xml -o Reports/Nmap_TLS_Output.html
15+
cat Swett_Thirty-two.gnmap | grep Up | cut -d ' ' -f 2 > live
16+
817
for c in $(cat targets); do
918
for i in $(cat WeakCiphers.txt); do
1019
echo "----------------------------------------------TLSv1--------------------------------------------------------"

Sweet32_Birthday/README.md

+5-5
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,8 @@
11
# Sweet32: Birthday attacks
22
The script below is to test for CVE-2016-2183, CVE-2016-6329 or you may know it better as the Sweet32 birthday attack. For more detail please reference the links below;
33

4-
https://sweet32.info/
5-
https://access.redhat.com/articles/2548661
6-
https://www.openssl.org/blog/blog/2016/08/24/sweet32/
7-
https://www.rapid7.com/db/vulnerabilities/ssl-cve-2016-2183-sweet32
8-
https://www.digicert.com/blog/sweet32-birthday-attack-what-you-need-to-know/
4+
1. https://sweet32.info/
5+
2. https://access.redhat.com/articles/2548661
6+
3. https://www.openssl.org/blog/blog/2016/08/24/sweet32/
7+
4. https://www.rapid7.com/db/vulnerabilities/ssl-cve-2016-2183-sweet32
8+
5. https://www.digicert.com/blog/sweet32-birthday-attack-what-you-need-to-know/

Sweet32_Birthday/WeakCiphers.txt

+1-1
Original file line numberDiff line numberDiff line change
@@ -26,4 +26,4 @@ SRP-DSS-AES-128-CBC-SHA
2626
SRP-DSS-AES-256-CBC-SHA
2727
SRP-RSA-3DES-EDE-CBC-SHA
2828
SRP-RSA-AES-128-CBC-SHA
29-
SRP-RSA-AES-256-CBC-SHA
29+
SRP-RSA-AES-256-CBC-SHA

0 commit comments

Comments
 (0)