filebuster icon indicating copy to clipboard operation
filebuster copied to clipboard

Cannot create SSL connection

Open deo-gracias opened this issue 4 years ago • 2 comments

I want to fuzz a webapp, the web server is up and accessible via a browser but here is the result I got [!] Details: Internal Response: Cannot create SSL connection: Failed to set SSL cipher list error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match at /opt/filebuster/filebuster.pl line 551.

Any please please ?

deo-gracias avatar Feb 24 '20 12:02 deo-gracias

Are you using the latest version of FileBuster? There was a bug in the SSL cipher list on the older version. Also try to use the tool sslscan on the host that you are trying to fuzz and check which ciphers it supports. If you can show me the result (you can omit the hostname) it would be great so that I can investigate further.

henshin avatar Mar 10 '20 17:03 henshin

Yeah I discovered filebuster recently and I've to say it's a very good job you did For your question, yes I am using the latest version

I didn't note the host I was working on and face that issue, nevertheless, if I see it again, I'll reply to you on this thread Thanks

On Tue, Mar 10, 2020 at 1:21 PM Tiago Sintra [email protected] wrote:

Are you using the latest version of FileBuster? There was a bug in the SSL cipher list on the older version. Also try to use the tool sslscan on the host that you are trying to fuzz and check which ciphers it supports. If you can show me the result (you can omit the hostname) it would be great so that I can investigate further.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/henshin/filebuster/issues/13?email_source=notifications&email_token=AOHS7XEGJMMSUJE5M5I5YZ3RGZZKBA5CNFSM4K2HEXI2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEOMLFFY#issuecomment-597209751, or unsubscribe https://github.com/notifications/unsubscribe-auth/AOHS7XGHWPL3AOLZVYV64K3RGZZKBANCNFSM4K2HEXIQ .

deo-gracias avatar Mar 10 '20 18:03 deo-gracias