ssl-tls-and-certificates.md

SSL/TLS and Certificates

Tools

• SSL Cipher Suite Enum - ssl-cipher-suite enum is a Perl script to enumerate supported SSL cipher suites supported by network services (principally HTTPS)
  • https://labs.portcullis.co.uk/tools/ssl-cipher-suite-enum/
• Testssl.sh - a common tool used to audit the ciphers and protocols supported by remote servers, allowing people to determine if a secure configuration is enforced or not.
• sslScrape - strips hostnames form certs over port 443 connections
• SSLYZE - TLS/SSL config analyzer
• tls_prober - A tool to fingerprint SSL/TLS servers
• testssl.sh
• https://github.com/IBM/tls-vuln-cheatsheet

Certificate search

• Crt.sh - Certificate Search
• CTSearch - Certificate Transparency Search Tool
• tls.bufferover.run - Quickly find certificates in IPv4 space
• CertSpotter - Monitors your domains for expiring, unauthorized, and invalid SSL certificates
• SynapsInt - The unified OSINT research tool
• Censys - Certificates - Certificates Search
• PassiveTotal - Security intelligence that scales security operations and response

OpenSSL

• OpenSSL Cookbook

Used to create self signed certificates for SSL encryption

# openssl req -newkey rsa:2048 -nodes -keyout bind_shell.key -x509 -days 362 -out cirtificate.crt

• Tags
  • req - initiate a new certificate signing request
  • newkey - generate a new private key
  • rsa:2048 - use RSA encryption with a 2,048-bit key length
  • -nodes - store the private key without passphrase protection
  • -keyout - save the key to a file
  • -x509 - output a self-signed cert instead of a certificate request
  • -days - set validity period
  • -out - save this certificate to a file
• Generate a self signed Certificate for a CA

# cat certificate.key certificate.crt > certificate.pem

• Create a .pem file for use with tools like socat

# openssl req -new -x509 -keyout ca.key -out ca.crt -config openssl.cnf

• You will be prompted for certain pieces of information as well as a password which can be used when signing certificates in the future, so do not forget this! Two files will be outputted: ca.key which contains the CA’s private key, and ca.crt which contains the CA’s public key certificate.
• Attacking Network Protocols - pg.200