macr0phag3 / ja3box Goto Github PK

请问离线模式下，用>python3 ja3box.py -f test.pcap 为何不显示指纹，怎样才能输出指纹

 ________
[__,.,--\\ __     ______
   | |    / \\   |___ //
   | |   / _ \\    |_ \\
 ._| |  / ___ \\  ___) ||  toolbox
 \__// /_//  \_\\|____//   v2.0

*] mode: offline
*] filename: 1111.pcap

*] BPF: None
*] output filename: stdout
*] output as json: False
*] save raw pcap: False

+] all packets: 99; client hello: 0; server hello: 0; in 0.1s

*] goodbye~~

请问这个可以和python结合使用吗？使用到requests

作者您好，我今天下午还没看代码具体细节，先试着运行了一下您这个ja3box的代码，发现一些情况想要和你交流一下
首先我发现我的colorama设置的那些颜色效果在pycharm直接运行和命令行里面结果不太一样，在pycharm的run里面正常对应了各种彩色，但是在terminal里面颜色都是0？m32类似这样的情况。第二个是好像您设置的json存储时候只存储了ja3s而没有存ja3，看您提供的test.json也是这个样子

Hello
Thx for this nice code)
I would like to know if it is possible to get pure ja3, not ja3s in online mode?

SSLv2 的 问题似乎没有得到解决

这是工具返回的结果：

但是仔细观察pcap包可以发现它含有SSLv2 的client hello包

ERROR: Loading module scapy.layers.tls.all
Traceback (most recent call last):
File "/usr/local/lib/python3.6/site-packages/scapy/main.py", line 163, in _load
mod = importlib.import_module(module)
File "/usr/lib64/python3.6/importlib/init.py", line 126, in import_module
return _bootstrap._gcd_import(name[level:], package, level)
File "", line 994, in _gcd_import
File "", line 971, in _find_and_load
File "", line 955, in _find_and_load_unlocked
File "", line 665, in _load_unlocked
File "", line 678, in exec_module
File "", line 219, in _call_with_frames_removed
File "/usr/local/lib/python3.6/site-packages/scapy/layers/tls/all.py", line 12, in
from scapy.layers.tls.automaton_cli import * # noqa: F401
File "/usr/local/lib/python3.6/site-packages/scapy/layers/tls/automaton_cli.py", line 48, in
from scapy.layers.tls.automaton import _TLSAutomaton
File "/usr/local/lib/python3.6/site-packages/scapy/layers/tls/automaton.py", line 20, in
from scapy.layers.tls.record import TLS
File "/usr/local/lib/python3.6/site-packages/scapy/layers/tls/record.py", line 27, in
from scapy.layers.tls.handshake import (_tls_handshake_cls, _TLSHandshake,
File "/usr/local/lib/python3.6/site-packages/scapy/layers/tls/handshake.py", line 45, in
from scapy.layers.tls.extensions import (_ExtensionsLenField, _ExtensionsField,
File "/usr/local/lib/python3.6/site-packages/scapy/layers/tls/extensions.py", line 20, in
from scapy.layers.tls.keyexchange import (SigAndHashAlgsLenField,
File "/usr/local/lib/python3.6/site-packages/scapy/layers/tls/keyexchange.py", line 26, in
from scapy.layers.tls.crypto.groups import (
File "/usr/local/lib/python3.6/site-packages/scapy/layers/tls/crypto/groups.py", line 27, in
from cryptography.hazmat.primitives.asymmetric import x448
ImportError: cannot import name 'x448'
[!] Something went wrong: name 'TLS' is not defined