Comments (3)
There isn't a ready to use way to display the message before sending, but it shouldn't be too hard to add something like that.
fuzz_message()
here:
tlsfuzzer/tlsfuzzer/messages.py
Line 1666 in 309fe03
can modify any byte of the message before it's sent, so instead of calling
substitute_and_xor()
on data, you could do print(data.hex())
to get the hex-encoded message.
Sending hex-encoded message is supported, see RawMessageGenerator()
for that. You'll need to convert the hex-encoded bytes to bytes()
or bytearray()
first, with something like bytes.fromhex('deadbeef')
.
(If you want compatibility with very old pythons, you may want to use the a2b_hex()
and b2a_hex()
functions from tlslite-ng instead: https://github.com/tlsfuzzer/tlslite-ng/blob/4b5efc2285f114b437f6f1678617af3ca0e0fbc5/tlslite/utils/compat.py#L52 )
from tlsfuzzer.
Unfortunately, if we will take data from this place - it will be not full.
I can get data modifying method send() from tlslite\bufferedsocket.py
But when I try to modify hex data and send it like that my TLS message is sending incorrectly...
class BufferedSocket(object):
def send(self, data):
data = my_mod_data
if self.buffer_writes:
self._write_queue.append(data)
return len(data)
return self.socket.send(data)
from tlsfuzzer.
what do you mean by not full? it is the complete message; it does not include the record layer but that's by design, how messages are fragmented is separate from their contents
from tlsfuzzer.
Related Issues (20)
- Travis-CI is dead, we need to migrate to Actions
- regression in EXP-RC4-MD5 in SSLv2
- Help:How to test scripts without Application data HOT 3
- tlsfuzzer is not compatible with python3-3.10.0~b4-3.fc35.x86_64
- Add means to set default socket timeout to `scripts_retention.py` HOT 5
- Handle new curves/add brainpool TLS 1.3 definitions
- CI fails with crashing server on Python 3.3, 3.6 HOT 4
- QUIC transport parameters extension HOT 1
- TLS 1.3 0-RTT Handshake without EndOfEarlyData
- Crash in key generation with m2crypto
- A question about signature algorithm HOT 3
- scripts/test-aesccm.py missing connect HOT 3
- tlsfuzzer discord server
- Prevent 'add_child' from overwriting the 'child' (raise error) HOT 1
- Better CPU utilisation for wide systems during analysis
- test-bleichenbacher-timing-marvin: ServerHello: unexpected extension server_name when using DNS-based hostname HOT 5
- Python 3.12 deprecated asyncore, tlslite uses it... HOT 1
- Slow extraction and improvements to Minerva analysis HOT 5
- Publish to PyPI HOT 6
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from tlsfuzzer.