HashID and SSLScan plugins created
This commit is contained in:
79
README.md
79
README.md
@@ -269,6 +269,85 @@ Comprehensive HTTP security header analysis with security scoring and recommenda
|
||||
!headers subdomain.target.com
|
||||
```
|
||||
|
||||
### 🔐 Hash Identification
|
||||
|
||||
**🔄 !hashid [hash]**
|
||||
Advanced hash type identification with confidence scoring and tool recommendations.
|
||||
|
||||
**Features:**
|
||||
- **Comprehensive Detection**: 100+ hash types including modern, legacy, and exotic algorithms
|
||||
- **Confidence Scoring**: Color-coded confidence levels (🟢 Very High to 🔴 Low)
|
||||
- **Tool Integration**: Hashcat mode numbers and John the Ripper format names
|
||||
- **Context-Aware**: Handles modular crypt formats, LDAP, database, and network hashes
|
||||
|
||||
**Supported Hash Categories:**
|
||||
- **Modern Algorithms**: yescrypt, scrypt, Argon2 (i/d/id), bcrypt variants
|
||||
- **Unix/Linux**: SHA-512/256 Crypt, MD5 Crypt, Apache MD5 (apr1)
|
||||
- **Raw Hashes**: MD5, SHA-1/224/256/384/512, SHA-3, Keccak, BLAKE2
|
||||
- **Windows**: NTLM, LM, NetNTLMv1/v2
|
||||
- **Databases**: MySQL (4.1+, old), PostgreSQL, Oracle (11g, 12c), MSSQL
|
||||
- **Web/CMS**: WordPress, phpBB3, Drupal 7+, Django PBKDF2
|
||||
- **LDAP**: SSHA, SMD5, various LDAP crypt formats
|
||||
- **Exotic**: Whirlpool, RIPEMD, GOST, Tiger, Haval
|
||||
|
||||
**Tool Integration:**
|
||||
- **Hashcat**: Mode numbers for direct use with `-m` parameter
|
||||
- **John the Ripper**: Format names for `--format=` parameter
|
||||
- **Multi-tool Support**: Works with most popular password cracking tools
|
||||
|
||||
**Examples:**
|
||||
```bash
|
||||
!hashid 5d41402abc4b2a76b9719d911017c592
|
||||
!hashid aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434d
|
||||
!hashid $6$rounds=5000$salt$hashvalue...
|
||||
!hashid $y$j9T$... (modern Linux yescrypt)
|
||||
!hashid 8846f7eaee8fb117ad06bdd830b7586c
|
||||
!hashid *2470C0C06DEE42FD1618BB99005ADCA2EC9D1E19
|
||||
```
|
||||
|
||||
### 🔐 SSL/TLS Security Scanner
|
||||
|
||||
**🔐 !sslscan [domain[:port]]**
|
||||
Comprehensive SSL/TLS security scanning and analysis with vulnerability detection.
|
||||
|
||||
**Features:**
|
||||
- **Protocol Analysis**: TLS 1.0-1.3 support testing with security scoring
|
||||
- **Certificate Validation**: Chain validation, expiration, signature algorithms
|
||||
- **Cipher Suite Testing**: 25+ cipher suites with strength classification
|
||||
- **Vulnerability Detection**: POODLE, weak ciphers, protocol vulnerabilities
|
||||
- **Security Scoring**: 0-100 rating with color-coded assessment
|
||||
- **Compliance Checking**: PCI DSS and modern security standards
|
||||
|
||||
**Security Checks:**
|
||||
- **Protocol Security**: TLS 1.2/1.3 enforcement, insecure protocol detection
|
||||
- **Certificate Health**: Expiration monitoring, signature strength validation
|
||||
- **Cipher Security**: RC4, DES, 3DES, NULL cipher detection and classification
|
||||
- **Modern Standards**: Forward Secrecy, strong encryption, best practices
|
||||
|
||||
**Output Features:**
|
||||
- **Security Score**: Overall rating (🟢 Excellent to 🔴 Poor)
|
||||
- **Detailed Breakdown**: Protocol support, cipher analysis, certificate info
|
||||
- **Vulnerability List**: CVE references and severity ratings
|
||||
- **Actionable Recommendations**: Specific fixes and configuration improvements
|
||||
- **Quick Assessment**: Executive summary for rapid evaluation
|
||||
|
||||
**Examples:**
|
||||
```bash
|
||||
!sslscan example.com
|
||||
!sslscan github.com:443
|
||||
!sslscan localhost:8443
|
||||
!sslscan 192.168.1.1:443
|
||||
```
|
||||
🟢 Excellent (90-100): Modern TLS configuration with strong security
|
||||
🟡 Good (80-89): Good security with minor improvements needed
|
||||
🟠 Fair (60-79): Moderate security, significant improvements recommended
|
||||
🔴 Poor (0-59): Critical security issues requiring immediate attention
|
||||
|
||||
*Note: SSLv2/SSLv3 testing limited by Python security features (intentional security measure)*
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
### AI & Generation Commands
|
||||
|
||||
|
Reference in New Issue
Block a user