Skip to content

Instantly share code, notes, and snippets.

@timb-machine
Created November 19, 2017 18:33
Show Gist options
  • Save timb-machine/01a8eebb538982914b214b2381135b4b to your computer and use it in GitHub Desktop.
Save timb-machine/01a8eebb538982914b214b2381135b4b to your computer and use it in GitHub Desktop.
Script started on 2017-11-19 18:23:01+0000
Scanning x (x.x.x.x:443). [SNI: None]
Enumerating ciphers...
Testing protocol SSLv2.0...
Testing protocol SSLv3.0...
Testing protocol TLSv1.0...
Testing protocol TLSv1.1...
RSA_WITH_AES_128_CBC_SHA [0x0000002f]
RSA_WITH_AES_256_CBC_SHA [0x00000035]
RSA_WITH_CAMELLIA_128_CBC_SHA [0x00000041]
RSA_WITH_CAMELLIA_256_CBC_SHA [0x00000084]
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013]
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014]
Testing protocol TLSv1.2...
RSA_WITH_AES_128_CBC_SHA [0x0000002f]
RSA_WITH_AES_256_CBC_SHA [0x00000035]
RSA_WITH_AES_128_CBC_SHA256 [0x0000003c]
RSA_WITH_AES_256_CBC_SHA256 [0x0000003d]
RSA_WITH_CAMELLIA_128_CBC_SHA [0x00000041]
RSA_WITH_CAMELLIA_256_CBC_SHA [0x00000084]
RSA_WITH_AES_128_GCM_SHA256 [0x0000009c]
RSA_WITH_AES_256_GCM_SHA384 [0x0000009d]
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013]
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014]
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027]
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028]
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f]
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030]
Testing protocol TLSv1.3...
Testing elliptic curve support...
Testing elliptic curve support for ECDHE_RSA_WITH_AES_128_CBC_SHA ...
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0009] sect283k1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000a] sect283r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000b] sect409k1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000c] sect409r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000d] sect571k1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000e] sect571r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0016] secp256k1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0017] secp256r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0018] secp384r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0019] secp521r1
Testing elliptic curve support for ECDHE_RSA_WITH_AES_256_CBC_SHA ...
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0009] sect283k1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000a] sect283r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000b] sect409k1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000c] sect409r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000d] sect571k1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000e] sect571r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0016] secp256k1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0017] secp256r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0018] secp384r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0019] secp521r1
Testing elliptic curve support for ECDHE_RSA_WITH_AES_128_CBC_SHA ...
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0009] sect283k1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000a] sect283r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000b] sect409k1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000c] sect409r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000d] sect571k1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x000e] sect571r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0016] secp256k1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0017] secp256r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0018] secp384r1
ECDHE_RSA_WITH_AES_128_CBC_SHA [0x0000c013] curve: [0x0019] secp521r1
Testing elliptic curve support for ECDHE_RSA_WITH_AES_256_CBC_SHA ...
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0009] sect283k1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000a] sect283r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000b] sect409k1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000c] sect409r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000d] sect571k1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x000e] sect571r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0016] secp256k1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0017] secp256r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0018] secp384r1
ECDHE_RSA_WITH_AES_256_CBC_SHA [0x0000c014] curve: [0x0019] secp521r1
Testing elliptic curve support for ECDHE_RSA_WITH_AES_128_CBC_SHA256 ...
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x0009] sect283k1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x000a] sect283r1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x000b] sect409k1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x000c] sect409r1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x000d] sect571k1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x000e] sect571r1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x0016] secp256k1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x0017] secp256r1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x0018] secp384r1
ECDHE_RSA_WITH_AES_128_CBC_SHA256 [0x0000c027] curve: [0x0019] secp521r1
Testing elliptic curve support for ECDHE_RSA_WITH_AES_256_CBC_SHA384 ...
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x0009] sect283k1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x000a] sect283r1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x000b] sect409k1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x000c] sect409r1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x000d] sect571k1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x000e] sect571r1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x0016] secp256k1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x0017] secp256r1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x0018] secp384r1
ECDHE_RSA_WITH_AES_256_CBC_SHA384 [0x0000c028] curve: [0x0019] secp521r1
Testing elliptic curve support for ECDHE_RSA_WITH_AES_128_GCM_SHA256 ...
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x0009] sect283k1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x000a] sect283r1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x000b] sect409k1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x000c] sect409r1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x000d] sect571k1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x000e] sect571r1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x0016] secp256k1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x0017] secp256r1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x0018] secp384r1
ECDHE_RSA_WITH_AES_128_GCM_SHA256 [0x0000c02f] curve: [0x0019] secp521r1
Testing elliptic curve support for ECDHE_RSA_WITH_AES_256_GCM_SHA384 ...
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x0009] sect283k1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x000a] sect283r1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x000b] sect409k1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x000c] sect409r1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x000d] sect571k1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x000e] sect571r1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x0016] secp256k1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x0017] secp256r1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x0018] secp384r1
ECDHE_RSA_WITH_AES_256_GCM_SHA384 [0x0000c030] curve: [0x0019] secp521r1
Server did not advertise NPN support.
The server supports the following outdated ALPN protocols: h2-08, h2-03, h2-07, h2-13, h2-04, h2-11, h2-12, h2-05, h2-06, h2-10, h2-08, h2-01, h2-02
Server advertised ALPN support.
Testing validation of individual MAC bits...
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
All modified MAC bits were correctly rejected.
Testing server random values...
Gathering data...
Couldn't collect as much data as we would like to have.
Collected 29824 bytes of random data.
Uniqueness test...
All server random values were unique.
Server random data was not easily compressed (ratio: 100.1%), looks high entropy.
Mean test...
Mean: 127.164364
Serial correlation test...
Correlation: 0.501581
Monobit frequency test...
Monobit frequency: 0.499652
Complete.
Script done on 2017-11-19 18:27:52+0000
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment