mirror of
https://github.com/XTLS/RealiTLScanner.git
synced 2026-09-27 09:37:59 +03:00
51 lines
1.2 KiB
Go
51 lines
1.2 KiB
Go
package main
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"io"
|
|
"log/slog"
|
|
"net"
|
|
"strconv"
|
|
"time"
|
|
)
|
|
|
|
var TLSDictionary = map[uint16]string{
|
|
0x0301: "1.0",
|
|
0x0302: "1.1",
|
|
0x0303: "1.2",
|
|
0x0304: "1.3",
|
|
}
|
|
|
|
func ScanTLS(ip net.IP, out io.Writer) {
|
|
hostPort := net.JoinHostPort(ip.String(), strconv.Itoa(port))
|
|
conn, err := net.DialTimeout("tcp", hostPort, time.Duration(timeout)*time.Second)
|
|
if err != nil {
|
|
slog.Debug("Cannot dial", "target", hostPort)
|
|
return
|
|
}
|
|
defer conn.Close()
|
|
err = conn.SetDeadline(time.Now().Add(time.Duration(timeout) * time.Second))
|
|
if err != nil {
|
|
slog.Error("Error setting deadline", "err", err)
|
|
return
|
|
}
|
|
c := tls.Client(conn, &tls.Config{
|
|
InsecureSkipVerify: true,
|
|
NextProtos: []string{"h2", "http/1.1"},
|
|
})
|
|
err = c.Handshake()
|
|
if err != nil {
|
|
slog.Debug("TLS handshake failed", "target", hostPort)
|
|
return
|
|
}
|
|
state := c.ConnectionState()
|
|
alpn := state.NegotiatedProtocol
|
|
log := slog.Debug
|
|
if state.Version == 0x0304 && alpn == "h2" {
|
|
log = slog.Info
|
|
_, _ = io.WriteString(out, ip.String()+"\n")
|
|
}
|
|
log("Connected to target", "host", ip.String(), "tls", TLSDictionary[state.Version],
|
|
"alpn", alpn, "cert", state.PeerCertificates[0].Subject)
|
|
}
|