forked from dreadl0ck/tlsx
-
Notifications
You must be signed in to change notification settings - Fork 1
/
Copy pathutils.go
68 lines (63 loc) · 1.77 KB
/
utils.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
package tlsx
import (
"github.com/kubeshark/gopacket"
"github.com/kubeshark/gopacket/layers"
)
// GetServerHello returns a server hello message if the gopacket contains one
func GetServerHello(packet gopacket.Packet) *ServerHello {
if tcpLayer := packet.Layer(layers.LayerTypeTCP); tcpLayer != nil {
var (
t, _ = tcpLayer.(*layers.TCP)
hello = ServerHello{}
err = hello.Unmarshal(t.LayerPayload())
)
if err == nil {
return &hello
}
}
return nil
}
// GetServerHelloMinimal returns a server hello message if the gopacket contains one
// this variant only parses the fields necessary to generate a JA client hash
func GetServerHelloBasic(packet gopacket.Packet) *ServerHelloBasic {
if tcpLayer := packet.Layer(layers.LayerTypeTCP); tcpLayer != nil {
var (
t, _ = tcpLayer.(*layers.TCP)
hello = ServerHelloBasic{}
err = hello.Unmarshal(t.LayerPayload())
)
if err == nil {
return &hello
}
}
return nil
}
// GetClientHello returns a client hello message if the gopacket contains one
func GetClientHello(packet gopacket.Packet) *ClientHello {
if tcpLayer := packet.Layer(layers.LayerTypeTCP); tcpLayer != nil {
var (
t, _ = tcpLayer.(*layers.TCP)
hello = ClientHello{}
err = hello.Unmarshal(t.LayerPayload())
)
if err == nil {
return &hello
}
}
return nil
}
// GetClientHelloMinimal returns a client hello message if the gopacket contains one
// this variant only parses the fields necessary to generate a JA client hash
func GetClientHelloBasic(packet gopacket.Packet) *ClientHelloBasic {
if tcpLayer := packet.Layer(layers.LayerTypeTCP); tcpLayer != nil {
var (
t, _ = tcpLayer.(*layers.TCP)
hello = ClientHelloBasic{}
err = hello.Unmarshal(t.LayerPayload())
)
if err == nil {
return &hello
}
}
return nil
}