We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Hello, @Tuhinshubhra. Thank you for sharing the CMSeeK! I found that if a target http server uses self-signed certificate, CMSeeK couldn't scan.
informations:
$python cmseek.py -u https://localhost:8443 _____ _____ _____ _____ | | | __|___ ___| | | by @r3dhax0r | --| | | |__ | -_| -_| -| |_____|_|_|_|_____|___|___|__|__| Version 1.0.8 [+] CMS Detection And Deep Scan [+] [i] Scanning Site: https://localhost:8443/ [x] Aborting CMSeek! Couldn't connect to site Error: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1045)> [i] Log saved in: /path/to/CMSeeK/Result/localhost:8443/cms.json _/\_ totsiens ~~ CMSeeK
$ cat /etc/issue Arch Linux \r (\l) $uname -r 4.17.14-arch1-1-ARCH $python -V Python 3.7.0
Following patch works for me.
diff --git a/cmseek.py b/cmseek.py index 9f9b260..4a3c694 100644 --- a/cmseek.py +++ b/cmseek.py @@ -48,6 +48,10 @@ elif args.random_agent is not None: cua = cmseek.randomua('random') else: cua = None + +import ssl +ssl._create_default_https_context = ssl._create_unverified_context + if args.url is not None: s = args.url target = cmseek.process_url(s)
Thanks!
The text was updated successfully, but these errors were encountered:
🐛 issue #20 Ignore certificate error
a778329
Fixed, pleasse update your version of CMSeeK
Sorry, something went wrong.
I confirmed fix. Thank you!
No branches or pull requests
Hello, @Tuhinshubhra. Thank you for sharing the CMSeeK!
I found that if a target http server uses self-signed certificate, CMSeeK couldn't scan.
informations:
Following patch works for me.
Thanks!
The text was updated successfully, but these errors were encountered: