script de test

voici le script de Dan Varga modifié, pour être plus simple à l'utilisation et à la lecture

Script call = bash poodle.sh {serverIP} {serverPort}

#Sent variable (host & port)
host=1ドル
port=2ドル
# #If empty IP then set 127.0.0.1 as default
if [ -z $host ];then
host="127.0.0.1"
fi
if [ -z $port ];then
port=443
fi
#create the returned code
out="`echo x | timeout 5 openssl s_client -ssl3 -connect ${host}:${port} 2>/dev/null`"
ret=$?
#create a switch statement on $ret, exploit depend on result code
case "$ret" in
0)
 echo "VULNERABLE! SSLv3 detected.";
;;
124)
 echo "error: timeout connecting to host $host:$port";
;;
1)
 out=`echo $out | perl -pe 's|.*Cipher is (.*?) .*|1ドル|'`;
 if [ "$out" == "0000" ] || [ "$out" == "(NONE)" ];then
 echo "Not Vulnerable. We detected that this server does not support SSLv3";exit
fi 
;;
*)
 echo "warning: $ret isn't a valid code while connecting to host $host:$port";
;;
esac
# https://github.com/Fro99666/froggPoodler