https://github.com/7c/sni-capture
small library to capture all tls helo sni extention fields
https://github.com/7c/sni-capture
Last synced: 2 months ago
JSON representation
small library to capture all tls helo sni extention fields
- Host: GitHub
- URL: https://github.com/7c/sni-capture
- Owner: 7c
- Created: 2021-11-26T14:03:08.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2021-12-02T18:19:38.000Z (over 4 years ago)
- Last Synced: 2025-12-26T21:59:07.449Z (6 months ago)
- Language: JavaScript
- Size: 9.77 KB
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# SNI Capture
This package uses pcap package to listen on default interface and port 443 to determine all TLS HELO Handshakes and SNI Extention. You may need https://github.com/node-pcap/node_pcap for details, how to use `createSession` method inside the code. Out of the box, this tool will console log everything it can find.
## Parameters
```
node sni-capture.js [--log ]
--log : will console output and log output to the file
```
## Purphose
imagine you have purchased a domainname and you do not know if this domain has traffic and if so you want to know if you receive https traffic and if so you need to know which subdomain you need to set-up. This small tool will help you seeing all SNI Extention handshakes of TLS.
## Validation
Added SSL Validation for seen hosts. Every 10minutes we do check Domains for SSL certificates and mark them with 'SSL VERIFIED' if verified, otherwise it returns the error code as Red.
## Requirements
For ubuntu:
`apt install build-essential libpcap-dev`