Metasploit mailing list archives

SSL v3 Fuzzer for Metasploit


From: suchi.c at gmail.com (suchindra chandrahas)
Date: Sun, 11 Nov 2007 07:45:14 +0530

Hi,
       Inspired by openssl-too-open, i just started writing a SSL v3
client (using some of openssl-too-open stuff) which does not use
openssl libraries, so that it can later be
used to fuzz SSL v3 Implementations. It is still incomplete and it is
in final stage (the client i mean). I would make generalizations and
necessary changes later for making it a fuzzer and provide APIs for
the same and hooks in python too. I am somehow stuck at the final
ClientFinished part. Can you please help me out? Here is the code:

http://ssl3fuzzerapi.googlecode.com

Thanks and Regards,
Suchindra Chandrahas



-- 
Albert Einstein, the famous 20th-century physicist, famously said:

    Quantum mechanics is certainly imposing. But an inner voice tells
me it is not yet the real thing. The theory says a lot, but does not
really bring us any closer to the secret of the Old One. I, at any
rate, am convinced that He does not throw dice.



Current thread: