Skip to content

Instantly share code, notes, and snippets.

@TomSellers
Created May 6, 2016 02:03
Show Gist options
  • Save TomSellers/a8b44a3946370e8902f54132455f8233 to your computer and use it in GitHub Desktop.
Save TomSellers/a8b44a3946370e8902f54132455f8233 to your computer and use it in GitHub Desktop.
##############################NEXT PROBE##############################
# DTLS 1.0 Probe - Client Hello (x16) - Cipher suite TLS_RSA_WITH_AES_128_CBC_SHA (x00 x2f)
# no compression
Probe UDP DTLS q|\x16\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x56\x01\x00\x00\x4a\x00\x00\x00\x00\x00\x00\x00\x4a\x01\x00\x22\x22\x22\x22\xe2\x12\x23\xdf\x12\xa8\xf5\xe1\x00\x7c\x5f\xe$
ports 443,4433
rarity 9
# DTLS 1.0 - Hello Verify Request (x3)
# Non-product specific - Remaining 20 bytes are session cookie and so will change
match dtls m|\x16\x01\0\0\0\0\0\0\0\0\0\0#\x03\0\0\x17\0\0\0\0\0\0\0\x17\x01\0\x14| i/Datagram TLS 1.0 (DTLS) generic match/
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment