FilesExpand file tree

master

/

ssl-check.py

Copy path

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

executable file

·

52 lines (42 loc) · 1.57 KB

master

/

ssl-check.py

Copy path

Top

File metadata and controls

• Code
• Blame

executable file

·

52 lines (42 loc) · 1.57 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

#!/usr/bin/env python3

import ssl

import sys

import argparse

from cryptography import x509

parser = argparse.ArgumentParser(description="Quick and dirty way to check for an SSL listener",

formatter_class=argparse.ArgumentDefaultsHelpFormatter)

parser.add_argument("-i","--ip", required=False, help="IPv4 address to check, e.g. 4.2.2.2")

parser.add_argument("-p", "--port", required=False, default=443)

parser.add_argument("-f","--file", required=False, help="File containing a list of IPs")

parser.add_argument("-v","--verbose",action="store_true",help="Verbose output",default=False)

args = parser.parse_args()

if not args.ip and not args.file:

parser.print_help()

sys.exit(-1)

def main(self):

if args.file:

HOSTNAME = self

else:

HOSTNAME = args.ip

PORT = args.port

context = ssl.create_default_context()

context.check_hostname = False

context.verify_mode = ssl.CERT_NONE

try:

get_cert = ssl.get_server_certificate((HOSTNAME,PORT),timeout=1)

except Exception as e:

if args.verbose:

print(f"{HOSTNAME},[ERROR] {e}")

sys.exit(-1)

cert = x509.load_pem_x509_certificate(get_cert.encode('latin-1'))

cert_subject = cert.subject.rfc4514_string()

print(f"{HOSTNAME},{cert_subject}")

if __name__ == "__main__":

if args.file:

with open(args.file, 'r') as f:

for HOSTNAME in f.read:

HOSTNAME = HOSTNAME.strip('\n')

print(f"DBG: {HOSTNAME}")

main(HOSTNAME)

else:

main(args.ip)