Extend the compatibility of zgrab2 SSL/TLS negotiation
Accomplish that without requiring users to specify a long list of cipher-suite identifieres using --cipher-suite
This would essentially be a change in zcrypto to add something like PortableCiphers (similar to ChromeCiphers, SafariCiphers, etc) and then a one line change in zgrab2 in the map that is used when looking at --cipher-suite parameters with values like safari-only, chrome-only, etc.
A PR supporting this effort is already merged in zcrypto. There is now a PR available for the zgrab2 side
There is more detail on this in https://github.com/zmap/zcrypto/issues/236 but the gist is that it would be nice to:
--cipher-suite
This would essentially be a change in zcrypto to add something like
PortableCiphers
(similar toChromeCiphers
,SafariCiphers
, etc) and then a one line change in zgrab2 in the map that is used when looking at--cipher-suite
parameters with values likesafari-only
,chrome-only
, etc.A PR supporting this effort is already merged in zcrypto. There is now a PR available for the zgrab2 side
Thanks!