View Issue Details
|ID||Project||Category||View Status||Date Submitted||Last Update|
|0006771||Kali Linux||Kali Package Bug||public||2020-10-06 15:10||2021-03-09 10:46|
|Summary||0006771: Gobuster 3.0.1 does not support TLS 1.3|
Gobuster version 3.0.1 does not connect to TLS 1.3 only servers.
|Steps To Reproduce|
$ gobuster dir -u https://tls13.1d.pw -w /usr/share/wordlists/dirb/small.txt
Workaround: compile latest Gobuster version from source
go get github.com/OJ/gobuster
I'm setting this right now even when running 3.1 built with golang 1.15. From what I can tell there are issues with 1.3 negotiation with certain servers. I'm still trying to get to the bottom of it.
@IPv4v6 can you please share the local configuration that you have that builds binaries that works against tls13.1d.pw ?
We went through the rabbit hole of figuring out what was wrong, turns out that the server had an issue. For more information see here:
I also saw that error (tls: error decoding message) when testing with my self-compiled gobuster binary at the time the server was broken.
To make it clear: the current gobuster Kali package binary has a problem.
$ apt policy gobuster
$ ls -la /usr/bin/gobuster
$ /usr/bin/gobuster dir -u https://tls13.1d.pw -w /usr/share/wordlists/dirb/small.txt
fixed in new version 3.1.0-0kali1
|2020-10-06 15:10||IPv4v6||New Issue|
|2020-10-08 00:19||TheColonial||File Added: image.png|
|2020-10-08 00:19||TheColonial||Note Added: 0013543|
|2020-10-19 00:04||TheColonial||Note Added: 0013572|
|2020-11-04 07:30||IPv4v6||Note Added: 0013629|
|2021-03-09 10:46||sbrun||Assigned To||=> sbrun|
|2021-03-09 10:46||sbrun||Status||new => resolved|
|2021-03-09 10:46||sbrun||Resolution||open => fixed|
|2021-03-09 10:46||sbrun||Note Added: 0014294|