File ssl-known-key
Script types:
portrule
Categories:
safe, discovery, vuln
Download: http://nmap.org/svn/scripts/ssl-known-key.nse
User Summary
Checks whether the SSL certificate used by a host has a fingerprint that matches an included database of problematic keys.
The only database currently checked the LittleBlackBox 0.1 database of compromised keys from various devices, but any file of fingerprints will serve just as well. For example, this could be used to find weak Debian OpenSSL keys using the widely available (but too large to include with Nmap) list.
Script Arguments
ssl-known-key.fingerprintfile
Specify a different file to read fingerprints from.
Example Usage
nmap --script ssl-known-key -p 443 <host>
Script Output
PORT STATE SERVICE REASON 443/tcp open https syn-ack |_ssl-known-key: 00:28:E7:D4:9C:FA:4A:A5:98:4F:E4:97:EB:73:48:56:07:87:E4:96 is in the database with reason Little Black Box 0.1.
Requires
Author: Mak Kolybabi
License: Same as Nmap--See http://nmap.org/book/man-legal.html
