certificate ripper
2.3.0
Ein CLI -Tool zum Extrahieren von Serverzertifikaten

brew tap hakky54/crip && brew install cripnix-shell -p certificate-ripper aus oder fügen Sie Ihrer configuration.nix -Datei pkgs.certificate-ripper hinzuchoco install crip Mindestanforderungen:
Zusätzliche OS -spezifische Anforderungen
sudo apt-get update && sudo apt-get install build-essential libz-dev zlib1g-dev -yxcode-select --install mvn clean install -Pnative-image
&& ./target/crip print --url=https://youtube.com/
Die ausführbare Binärdatei der OS Native ist unter dem Zielverzeichnis mit dem Dateinamen crip verfügbar
Mindestanforderungen:
mvn clean install
&& java -jar target/crip.jar print --url=https://youtube.com/
Das Fat Jar wird unter dem Zielverzeichnis mit dem Dateinamen crip.jar verfügbar sein
Usage: crip [COMMAND]
Commands:
print Prints the extracted certificates to the console
export p12 Export the extracted certificate to a PKCS12/p12 type truststore
export jks Export the extracted certificate to a JKS (Java KeyStore) type truststore
export der Export the extracted certificate to a binary form also known as DER
export pem Export the extracted certificate to a base64 encoded string also known as PEM
Usage: crip print
Prints the extracted certificates to the console
-f, --format To be printed certificate format. This option is not required. Default is human-readable.
-u, --url Url of the target server to extract the certificates. Can be provided multiple times.
-t, --timeout Amount of milliseconds till the ripping should timeout
--resolve-ca Indicator to automatically resolve the root ca
Usage: crip export pkcs12
Export the extracted certificate to a PKCS12/p12 type truststore
-p, --password TrustStore password. This option is not required. Default is changeit.
-u, --url Url of the target server to extract the certificates. Can be provided multiple times.
-d, --destination Destination of the to be stored file. Default is current directory if none is provided.
-t, --timeout Amount of milliseconds till the ripping should timeout
--resolve-ca Indicator to automatically resolve the root ca
Usage: crip export der
Export the extracted certificate to a binary form also known as DER
-u, --url Url of the target server to extract the certificates. Can be provided multiple times.
-c, --combined Indicator to either combine all of the certificate into one file for a given url or export into individual files.
-d, --destination Destination of the to be stored file. Default is current directory if none is provided.
-t, --timeout Amount of milliseconds till the ripping should timeout
--resolve-ca Indicator to automatically resolve the root ca
Usage: crip export pem
Export the extracted certificate to a base64 encoded string also known as PEM
-u, --url Url of the target server to extract the certificates. Can be provided multiple times.
-c, --combined Indicator to either combine all of the certificate into one file for a given url or export into individual files.
-d, --destination Destination of the to be stored file. Default is current directory if none is provided.
--include-header Indicator to either omit or include additional information above the BEGIN statement.
-t, --timeout Amount of milliseconds till the ripping should timeout
--resolve-ca Indicator to automatically resolve the root ca
Proxy options applicable for all commands
--proxy-host Proxy host
--proxy-port Proxy port
--proxy-password Password for authenticating the user for the given proxy
--proxy-user User for authenticating the user for the given proxy
crip export pkcs12 -u=https://github.comcrip export pkcs12
-u=https://youtube.com
-u=https://github.com
-u=https://stackoverflow.com
-u=https://facebook.comcrip export pkcs12 -u=https://github.com -d=/path/to/directorycrip print -u=https://github.comcrip print -u=https://github.com -f=pemcrip print -f=pem
-u=https://youtube.com
-u=https://github.com
-u=https://stackoverflow.com
-u=https://facebook.comcrip export pem
-u=https://stackoverflow.com
--proxy-host=my-host.com
--proxy-port=1234
--proxy-user=foo
--proxy-passwordcrip export pem -u=https://github.com --combined=trueFunktioniert nur mit der kombinierten Option, während nur eine einzelne URL angibt.
crip export pem -u=https://github.com --combined=true --destination=/path/to/export/github-chain.crtEs gibt viele Möglichkeiten, zu diesem Projekt beizutragen: