Loading repository data…
xHaash / repository
SNI-Leak-PoC
A very simple script that sniff TLS Handshakes to parse the leaked domain in a output file thanks to the SNI Leak.
#clienthello#dns#dns-leak#dns-sniffer#scapy#sni
Live repository statistics
★ 9Stars
⑂ 1Forks
◯ 0Open issues
◉ 9Watchers
35/100
OPENREPOHUB HEALTH SIGNAL
Limited signals
A transparent discovery signal based on current public GitHub metadata.
Recent activity35% weight
10
Community adoption25% weight
14
Maintenance state20% weight
100
License clarity10% weight
0
Project information10% weight
75
This score does not audit code, security, maintainers, documentation quality, or suitability. Verify the repository and its current documentation before adoption.
README preview
SNI-Leak-PoC
This is a very simple script that sniff TLS Handshakes (Client Hello) and parse the leaked domains in an output file thanks to the SNI Leak. This script is made for showing the information leak that remains in the TLS protocole and more precisly in the SNI extension.
There's 2 versions of the script:
-
SNI_Pcap_Scanner.py-> Let you scan a .pcap file to extract the leaked domains from it. (Only CLI Output !) -
SNI_Sniffer.py-> Let you sniff your trafic live to extract the leaked domain directly while your browsing and parse them in theoutput.txtfile.
Installation
-
Install Python3 on your Device
-
pip3 install -r requirements.txt -
You can edit
iface=""and uncomment the lines 9 and 39 to sniff from a specific eth card. (Only if needed. Skip this step if you don't understand what it's about !) -
MacOS:
python3 SNI_Sniffer.pyWindows:py SNI_Sniffer.py
Screenshots