[Feature Request] SSL Parameter
S3cur3Th1sSh1t opened this issue · 3 comments
S3cur3Th1sSh1t commented
Hi,
first of all great tool! This makes weblogic vulnerability testing fast.
I found some applications, which server the /wls-wsat/CoordinatorPortType Endpoint via HTTPS instead of HTTP. So SSL support would be very nice at this point.
Greetings
0xn0ne commented
The program will automatically switch the https protocol to try again, unless it response to a request for http protocol, as described in this section.
https://github.com/0xn0ne/weblogicScanner/blob/master/utils.py#L109
0xn0ne commented
maybe you want to force https, I'll try it.
S3cur3Th1sSh1t commented
I was looking for verify=true in ws.py only. It failed because the target was using a self signed certificate and Verify is set to true ✋
Got it working now, thanks.