Gh0st
/
MHDDoS
mirror of https://github.com/MatrixTM/MHDDoS.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Potential fix for code scanning alert no. 3: Use of insecure SSL/TLS version 

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
This commit is contained in:
Tester2024 2025-10-22 01:26:30 +03:30 committed by GitHub
parent 47ddea7877
commit a0ddf3a62d
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
start.py
View File

@ -15,6 +15,7 @@ from socket import (AF_INET, IP_HDRINCL, IPPROTO_IP, IPPROTO_TCP, IPPROTO_UDP, S
SOCK_RAW, SOCK_STREAM, TCP_NODELAY, gethostbyname,
gethostname, socket)
from ssl import CERT_NONE, SSLContext, create_default_context
import ssl
from struct import pack as data_pack
from subprocess import run, PIPE
from sys import argv
@ -44,7 +45,14 @@ logger.setLevel("INFO")
ctx: SSLContext = create_default_context(cafile=where())
ctx.check_hostname = False
ctx.verify_mode = CERT_NONE
ctx.minimum_version = ctx.TLSVersion.TLSv1_2
# Enforce only TLSv1.2+ (defense-in-depth: also disable older protocols explicitly)
if hasattr(ctx, "minimum_version") and hasattr(ssl, "TLSVersion"):
ctx.minimum_version = ssl.TLSVersion.TLSv1_2
# Disable insecure TLS versions for additional safety
if hasattr(ssl, "OP_NO_TLSv1"):
ctx.options |= ssl.OP_NO_TLSv1
if hasattr(ssl, "OP_NO_TLSv1_1"):
ctx.options |= ssl.OP_NO_TLSv1_1
__version__: str = "2.4 SNAPSHOT"
__dir__: Path = Path(__file__).parent