BishopFox / h2csmuggler

HTTP Request Smuggling over HTTP/2 Cleartext (h2c)
MIT License
644 stars 100 forks source link

Got an error multiple times. #10

Closed Dheerajmadhukar closed 3 years ago

Dheerajmadhukar commented 3 years ago

[ERROR] [Errno -5] No address associated with hostname: https://domain.tld/path [ERROR] [Errno -5] No address associated with hostname: https://domain.tld/path [ERROR] [Errno -5] No address associated with hostname: https://domain.tld/path [ERROR] [Errno -5] No address associated with hostname: https://domain.tld/path [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld/path [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld/path [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld/path [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld/path [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld/path [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld/path [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld/path [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld [ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain.tld

Command: python3 h2csmuggler.py --scan-list h2c_urls.txt --test --threads 800 2>/dev/null

When i manually visit the URLs/Domains/Paths, i can access them with 200/301/302 res code. Help me out please.

rahultalekar commented 3 years ago

[ERROR] [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1123): https://domain

same error

rahultalekar commented 3 years ago

@Dheerajmadhukar do you find any solution for this issue ?

hktalent commented 3 years ago
image
        ctx=ssl.SSLContext(ssl.PROTOCOL_TLSv1_2)
        ctx.set_ciphers('ALL')
        retSock = ctx.wrap_socket(sock, server_hostname=connect_args[0])

now fixed @rahultalekar @Dheerajmadhukar @the-bumble @riramar

Dheerajmadhukar commented 3 years ago

Thanks mate :)

rahultalekar commented 3 years ago

thanks @hktalent