Kasiandra/sslchecker
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

add ipv6 only support

Browse source 
add a if function to check if host is ipv6 only and if yes, then run nmap with option -6
This commit is contained in:
Kaisa Marysia 2022-02-02 12:53:49 +01:00
parent 6279a4670c
commit c11a244cc6
1 changed files with 16 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

20
sslchecker
View file

@ -1,5 +1,4 @@
#!/usr/bin/env bash #!/bin/bash
usage() usage()
{ {
cat <<EOF cat <<EOF
@ -71,6 +70,11 @@ RemoteCheck()
nmap --script ssl-cert -p $port $host -oX - | xmlstarlet sel -t -m '/nmaprun/host/ports/port' -o "CA=\"" -v 'script/table/elem[@key="organizationName"]' -o "\"" -o $'\n' -o "BEGINN=\"" -v 'script/table/elem[@key="notBefore"]' -o "\"" -o $'\n' -o "ENDING=\"" -v 'script/table/elem[@key="notAfter"]' -o "\"" -o $'\n' -o "DOMAINS=\"" -v 'script/table/table[elem="X509v3 Subject Alternative Name"]/elem[@key="value"]' -o "\"" - 2>/dev/null | sed -e 's/DNS://g' nmap --script ssl-cert -p $port $host -oX - | xmlstarlet sel -t -m '/nmaprun/host/ports/port' -o "CA=\"" -v 'script/table/elem[@key="organizationName"]' -o "\"" -o $'\n' -o "BEGINN=\"" -v 'script/table/elem[@key="notBefore"]' -o "\"" -o $'\n' -o "ENDING=\"" -v 'script/table/elem[@key="notAfter"]' -o "\"" -o $'\n' -o "DOMAINS=\"" -v 'script/table/table[elem="X509v3 Subject Alternative Name"]/elem[@key="value"]' -o "\"" - 2>/dev/null | sed -e 's/DNS://g'
} }
RemoteCheck6()
{
nmap -6 --script ssl-cert -p $port $host -oX - | xmlstarlet sel -t -m '/nmaprun/host/ports/port' -o "CA=\"" -v 'script/table/elem[@key="organizationName"]' -o "\"" -o $'\n' -o "BEGINN=\"" -v 'script/table/elem[@key="notBefore"]' -o "\"" -o $'\n' -o "ENDING=\"" -v 'script/table/elem[@key="notAfter"]' -o '"' -o $'\n' -o "DOMAINS=\"" -v 'script/table/table[elem="X509v3 Subject Alternative Name"]/elem[@key="value"]' -o "\"" - 2>/dev/null | sed -e 's/DNS://g'
}
Records() Records()
{ {
ipv4s=`dig +short A $host` ipv4s=`dig +short A $host`
@ -96,7 +100,13 @@ if [ -z "$port" ]; then
port="443" port="443"
fi fi
source <(RemoteCheck) if RemoteCheck 2>&1 | grep -q -s -cim1 "not to any IPv4 address."; then
source <(RemoteCheck6);
else
source <(RemoteCheck);
fi
#source <(RemoteCheck)
echo -e '\e[90m\e[1m\e[104mCert is valid for:\e[0m' echo -e '\e[90m\e[1m\e[104mCert is valid for:\e[0m'
echo \ $DOMAINS | sed 's/,/\n/g' echo \ $DOMAINS | sed 's/,/\n/g'
@ -110,12 +120,12 @@ Records
fi fi
if [ "$source" == "update" ]; then if [ "$source" == "update" ]; then
curl https://raw.githubusercontent.com/Kaisa-Marysia/sslchecker/main/sslchecker -o /usr/bin/sslchecker curl https://git.elektrollart.org/Elektroll/sslchecker/raw/branch/master/sslchecker -o /usr/bin/sslchecker
chmod +x /usr/bin/sslchecker chmod +x /usr/bin/sslchecker
fi fi
if [ "$source" == "version" ]; then if [ "$source" == "version" ]; then
echo "Version 2021-10-29" echo "Version 2022-02-02"
fi fi
if [ "$source" == "cipher" ]; then if [ "$source" == "cipher" ]; then