[NSE] tls-nextprotoneg

[Hani Benhabiles <kroosec () gmail com>]

Hi list,

description = [[
Enumerates a TLS server's supported protocols by using the next protocol 
negotiation extension.

This works by adding the next protocol negotiation extension in the 
client hello
packet and looking for the presence of certain protocols in the server 
hello's
NPN extension data.

For more information , see:
    * https://tools.ietf.org/html/draft-agl-tls-nextprotoneg-03
]]

 ---
 -- @usage
 -- nmap --script=tls-nextprotoneg <targets>
 --
 --@output
 -- 443/tcp open  https
 -- | tls-nextprotoneg:
 -- |   spdy/3
 -- |   spdy/2
 -- |_  http/1.1

Tests and feedback are welcome.

Cheers,
Hani.

--
Hani Benhabiles

Twitter: https://twitter.com/#!/kroosec
Blog: http://kroosec.blogspot.com

Attachment: tls-nextprotoneg.nse
Description:

_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/