Created
May 6, 2016 02:03
-
-
Save TomSellers/a8b44a3946370e8902f54132455f8233 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
##############################NEXT PROBE############################## | |
# DTLS 1.0 Probe - Client Hello (x16) - Cipher suite TLS_RSA_WITH_AES_128_CBC_SHA (x00 x2f) | |
# no compression | |
Probe UDP DTLS q|\x16\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x56\x01\x00\x00\x4a\x00\x00\x00\x00\x00\x00\x00\x4a\x01\x00\x22\x22\x22\x22\xe2\x12\x23\xdf\x12\xa8\xf5\xe1\x00\x7c\x5f\xe$ | |
ports 443,4433 | |
rarity 9 | |
# DTLS 1.0 - Hello Verify Request (x3) | |
# Non-product specific - Remaining 20 bytes are session cookie and so will change | |
match dtls m|\x16\x01\0\0\0\0\0\0\0\0\0\0#\x03\0\0\x17\0\0\0\0\0\0\0\x17\x01\0\x14| i/Datagram TLS 1.0 (DTLS) generic match/ | |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment