CoolFace
Apppublic

Deeps-2005/java-ssl-scanner

sourceHugging Faceupdated 1y agoView on Hugging Face
0likes
Analyzer$1.class183 linesDownload Raw Back to java_analyzer
1����A\Analyzer21com/github/javaparser/ast/visitor/ModifierVisitor<init>()V34visitp(Lcom/github/javaparser/ast/expr/MethodCallExpr;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;5-com/github/javaparser/ast/expr/MethodCallExprgetBegin()Ljava/util/Optional;apply()Ljava/util/function/Function;6java/util/Optionalmap3(Ljava/util/function/Function;)Ljava/util/Optional;7 !"java/lang/IntegervalueOf(I)Ljava/lang/Integer;8$%&orElse&(Ljava/lang/Object;)Ljava/lang/Object;9()*intValue()I10,-.getNameAsString()Ljava/lang/String;0checkServerTrusted1123456java/lang/Stringequals(Ljava/lang/Object;)Z1289getScope13;<=	isPresent()Z14?@Aget()Ljava/lang/Object;C)com/github/javaparser/ast/expr/Expression15BEF.toStringHX509TrustManager162JKLcontains(Ljava/lang/CharSequence;)ZNTrustManager17PQ
getParentNodeSTUtest ()Ljava/util/function/Predicate;18WXYfilter4(Ljava/util/function/Predicate;)Ljava/util/Optional;19]^flatMap20`ab!cjava/lang/Boolean(Z)Ljava/lang/Boolean;21`ef=booleanValue	hijkljava/lang/SystemoutLjava/io/PrintStream;nopmakeConcatWithConstants(I)Ljava/lang/String;22rstuvjava/io/PrintStreamprintln(Ljava/lang/String;)VxsetEnabledCipherSuitesz	SSLSocket|	SSLEngine23~�getArguments&()Lcom/github/javaparser/ast/NodeList;���accept (I)Ljava/util/function/Consumer;24�����"com/github/javaparser/ast/NodeListforEach (Ljava/util/function/Consumer;)V�	setHeader�	addHeader25���*size26���getArgument.(I)Lcom/github/javaparser/ast/expr/Expression;27B��=isStringLiteralExpr28B���asStringLiteralExpr4()Lcom/github/javaparser/ast/expr/StringLiteralExpr;29����.0com/github/javaparser/ast/expr/StringLiteralExprgetValue�Strict-Transport-Security302���equalsIgnoreCase(Ljava/lang/String;)Z312��.toLowerCase�max-age�	max-age=0�o�'(ILjava/lang/String;)Ljava/lang/String;�setRevocationEnabled�PKIXBuilderParameters32B��=isBooleanLiteralExpr33B���asBooleanLiteralExpr5()Lcom/github/javaparser/ast/expr/BooleanLiteralExpr;34����=1com/github/javaparser/ast/expr/BooleanLiteralExprn�setServerNames�
SSLParameters35B��=isNullLiteralExprn�setProperty�javax.net.debug	n�com.ibm.jsse2.renegotiate36n�setDefaultHostnameVerifier37B��=isLambdaExpr38B���asLambdaExpr-()Lcom/github/javaparser/ast/expr/LambdaExpr;39�����)com/github/javaparser/ast/expr/LambdaExprgetBody,()Lcom/github/javaparser/ast/stmt/Statement;40����=(com/github/javaparser/ast/stmt/StatementisExpressionStmt41����asExpressionStmt1()Lcom/github/javaparser/ast/stmt/ExpressionStmt;42�����-com/github/javaparser/ast/stmt/ExpressionStmt
getExpression-()Lcom/github/javaparser/ast/expr/Expression;n43���=isBlockStmt44����asBlockStmt,()Lcom/github/javaparser/ast/stmt/BlockStmt;45�����(com/github/javaparser/ast/stmt/BlockStmt
getStatements46���iterator()Ljava/util/Iterator;=java/util/IteratorhasNextAnext47)com/github/javaparser/ast/stmt/ReturnStmt48	�nloadKeyStore49B=isCharLiteralExpr
ngetInstance50SSLContext	INSECURE_PROTOCOLSLjava/util/List; !K6java/util/List512#$.toUpperCase�'setEnabledProtocols��+URL-http://522/0�53startsWith2	localhost4	127.0.0.1�7
MessageDigest	9:WEAK_HASHING_ALGORITHMS�=newInstance	?@A
XML_FACTORIESLjava/util/Set;C D
java/util/Setn54GHt(Lcom/github/javaparser/ast/expr/ObjectCreationExpr;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;55JK1com/github/javaparser/ast/expr/ObjectCreationExpr56JNOPgetType7()Lcom/github/javaparser/ast/type/ClassOrInterfaceType;57R,S3com/github/javaparser/ast/type/ClassOrInterfaceTypeUSecurity58JPXaddProvider59BZ[=isObjectCreationExpr60B]^_asObjectCreationExpr5()Lcom/github/javaparser/ast/expr/ObjectCreationExpr;afipsnd61CTVerifierSSn62JlmgetAnonymousClassBodyn�qSecureRandom63J~64�tu=isEmptynxHostnameVerifiern �|
SecretKeySpec~IvParameterSpec65B��=isMethodCallExpr66B���asMethodCallExpr1()Lcom/github/javaparser/ast/expr/MethodCallExpr;�getBytes�0.*(key|secret|password|salt|token|cipher|auth).*672���matches68B��=isArrayCreationExpr69B���asArrayCreationExpr4()Lcom/github/javaparser/ast/expr/ArrayCreationExpr;70����0com/github/javaparser/ast/expr/ArrayCreationExprgetInitializer�3com/github/javaparser/ast/expr/ArrayInitializerExpr71����	getValues72B��=isIntegerLiteralExpr!��ObjectInputStream"n73��k(Lcom/github/javaparser/ast/stmt/WhileStmt;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;74��(com/github/javaparser/ast/stmt/WhileStmt#75����getCondition$n76��t(Lcom/github/javaparser/ast/body/VariableDeclarator;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;77��1com/github/javaparser/ast/body/VariableDeclarator%78��O�'()Lcom/github/javaparser/ast/type/Type;79����=#com/github/javaparser/ast/type/TypeisArrayType80����asArrayType,()Lcom/github/javaparser/ast/type/ArrayType;81�����(com/github/javaparser/ast/type/ArrayTypegetComponentType82�E�String83��84����stream()Ljava/util/stream/Stream;&S���X�java/util/stream/Stream9(Ljava/util/function/Predicate;)Ljava/util/stream/Stream;'���8(Ljava/util/function/Function;)Ljava/util/stream/Stream;(S����anyMatch!(Ljava/util/function/Predicate;)Z)*S+n	��WEAK_CIPHER_KEYWORDS�85����&java/util/ObjectsrequireNonNull,�T�2(Ljava/lang/String;)Ljava/util/function/Predicate;-��&.*(password|pass|secret|key|pwd|123).*862��*length.�87��i(Lcom/github/javaparser/ast/stmt/TryStmt;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;88��&com/github/javaparser/ast/stmt/TryStmt/89����getCatchClauses0�java/lang/Void9091Analyzer$1f(Lcom/github/javaparser/ast/stmt/WhileStmt;Ljava/lang/Void;)Lcom/github/javaparser/ast/stmt/WhileStmt;92	x(Lcom/github/javaparser/ast/body/VariableDeclarator;Ljava/lang/Void;)Lcom/github/javaparser/ast/body/VariableDeclarator;93b(Lcom/github/javaparser/ast/stmt/TryStmt;Ljava/lang/Void;)Lcom/github/javaparser/ast/stmt/TryStmt;94x(Lcom/github/javaparser/ast/expr/ObjectCreationExpr;Ljava/lang/Void;)Lcom/github/javaparser/ast/expr/ObjectCreationExpr;95p(Lcom/github/javaparser/ast/expr/MethodCallExpr;Ljava/lang/Void;)Lcom/github/javaparser/ast/expr/MethodCallExpr;96*com/github/javaparser/ast/stmt/CatchClausegetParameter,()Lcom/github/javaparser/ast/body/Parameter;97�(com/github/javaparser/ast/body/Parameter	Exception	Throwable98!��99�#$%getStatement-(I)Lcom/github/javaparser/ast/stmt/Statement;'printStackTrace1�	*+,-.com/github/javaparser/PositionlineI0http/12h240com/github/javaparser/ast/body/MethodDeclaration1003,7verify10139�2n<checkClientTrusted3�4?�@2(ILjava/lang/String;)Ljava/util/function/Consumer;BCertificateExceptionDNoSuchAlgorithmException5FoG9(ILjava/lang/String;Ljava/lang/String;)Ljava/lang/String;I/com/github/javaparser/ast/body/FieldDeclaration102�P103BLM=isArrayInitializerExpr104BOPQasArrayInitializerExpr7()Lcom/github/javaparser/ast/expr/ArrayInitializerExpr;6�7�8�9�:�	XYNON_PFS_CIPHERS;�<105�E^	PublicKey`X509CertificateCodeLineNumberTable
StackMapTableMethodParametersN(Lcom/github/javaparser/ast/stmt/TryStmt;Ljava/lang/Object;)Ljava/lang/Object;P(Lcom/github/javaparser/ast/stmt/WhileStmt;Ljava/lang/Object;)Ljava/lang/Object;Y(Lcom/github/javaparser/ast/expr/ObjectCreationExpr;Ljava/lang/Object;)Ljava/lang/Object;U(Lcom/github/javaparser/ast/expr/MethodCallExpr;Ljava/lang/Object;)Ljava/lang/Object;Y(Lcom/github/javaparser/ast/body/VariableDeclarator;Ljava/lang/Object;)Ljava/lang/Object;lambda$visit$270(ILcom/github/javaparser/ast/stmt/CatchClause;)Vlambda$visit$265(Lcom/github/javaparser/Position;)Ljava/lang/Integer;lambda$visit$25lambda$visit$24?(Lcom/github/javaparser/ast/expr/Expression;)Ljava/lang/String;lambda$visit$23lambda$visit$22lambda$visit$21lambda$visit$20lambda$visit$194(ILcom/github/javaparser/ast/body/BodyDeclaration;)Vlambda$visit$18y.com/github/javaparser/ast/body/BodyDeclarationlambda$visit$17B(ILjava/lang/String;Lcom/github/javaparser/ast/stmt/CatchClause;)Vlambda$visit$16S(Lcom/github/javaparser/ast/Node;)Lcom/github/javaparser/ast/body/FieldDeclaration;lambda$visit$15#(Lcom/github/javaparser/ast/Node;)Zlambda$visit$14I(Lcom/github/javaparser/ast/body/VariableDeclarator;)Ljava/util/Optional;lambda$visit$13U(Lcom/github/javaparser/ast/Node;)Lcom/github/javaparser/ast/body/VariableDeclarator;lambda$visit$12lambda$visit$11lambda$visit$10/(ILcom/github/javaparser/ast/expr/Expression;)Vlambda$visit$9lambda$visit$8lambda$visit$7lambda$visit$6lambda$visit$5lambda$visit$4*(Ljava/util/Optional;)Ljava/util/Optional;lambda$visit$3?(Lcom/github/javaparser/ast/stmt/BlockStmt;)Ljava/lang/Boolean;lambda$visit$26(Lcom/github/javaparser/ast/Node;)Ljava/util/Optional;lambda$visit$1lambda$visit$0	SignatureELcom/github/javaparser/ast/visitor/ModifierVisitor<Ljava/lang/Void;>;106SourceFile
Analyzer.javaEnclosingMethod��main([Ljava/lang/String;)VNestHostBootstrapMethods&�107��mm6�108���109�����110������[Line ] ISSUE: Missing certificate pinning implementation - Vulnerable to MITM attacks. Implement certificate public key pinning. Severity: CRITICAL�(Ljava/lang/Object;)V�111����.(Lcom/github/javaparser/ast/expr/Expression;)V�v[Line ] ISSUE: Weak HSTS header configuration:  - Should include 'max-age' with substantial duration. Severity: HIGH��[Line ] ISSUE: Certificate revocation checking explicitly disabled - Enables revoked certificate acceptance. Severity: CRITICAL�\[Line ] ISSUE: SNI explicitly disabled - May cause TLS handshake failures. Severity: MEDIUM�w[Line ] ISSUE: Debug logging enabled (javax.net.debug) - Exposes sensitive SSL/TLS handshaking details. Severity: HIGH�e[Line ] ISSUE: TLS renegotiation potentially enabled - Can be abused for DoS attacks. Severity: HIGH��[Line ] ISSUE: Insecure HostnameVerifier (lambda always returns true) - Bypasses hostname validation, vulnerable to MITM. Severity: CRITICAL��[Line ] ISSUE: Insecure HostnameVerifier (lambda block always returns true) - Bypasses hostname validation, vulnerable to MITM. Severity: CRITICAL�t[Line ] ISSUE: Hardcoded literal password passed to KeyStore.load() - Sensitive info in source code. Severity: HIGH�h[Line ] ISSUE: Insecure SSL/TLS protocol requested:  - Known vulnerabilities exist. Severity: CRITICAL�112����113�����[Line ] WARNING: URL constructed with 'http://' scheme:  - Ensure sensitive data is not sent over insecure HTTP. Severity: MEDIUM�p[Line ] ISSUE: Weak hashing algorithm used:  - Use stronger algorithms like SHA-256 or SHA-512. Severity: HIGH��[Line ] ISSUE: XML parsing factory created without explicit XXE hardening - Potentially vulnerable to XXE attacks. Ensure external entities and DTDs are disabled. Severity: CRITICAL�114��m��[Line ] WARNING: Non-FIPS compliant cryptographic provider - Consider using FIPS validated modules for compliance. Severity: MEDIUM�115���116�����117�����118�~�119�|}}��[Line ] ISSUE: Certificate Transparency verifier created but not used - Implement CT validation for issued certificates. Severity: HIGH��[Line ] ISSUE: Anonymous X509TrustManager/TrustManager detected - Verify implementation for proper certificate validation. Severity: CRITICAL�120�wv�3(Lcom/github/javaparser/ast/body/BodyDeclaration;)V��[Line ] ISSUE: Unseeded SecureRandom instance - May lead to predictable keys or nonce values if not explicitly seeded. Severity: HIGH�~[Line ] ISSUE: Anonymous HostnameVerifier detected - Verify implementation for proper hostname validation. Severity: CRITICAL�121�uv�[Line ] ISSUE: Potentially hardcoded cryptographic key/salt/IV in  initialization. Store sensitive keys securely (e.g., environment variables, KeyVault). Severity: CRITICAL�[Line ] ISSUE: Deserialization of untrusted data via ObjectInputStream - Vulnerable to Remote Code Execution (RCE) if input is malicious. Avoid deserializing untrusted data. Severity: CRITICAL122tm�[Line ] ISSUE: Potential infinite loop (while(true)) - Could indicate a DoS vulnerability if related to resource consumption. Severity: HIGH	123124sm�
.(Lcom/github/javaparser/ast/expr/Expression;)Z125rpp126q��127op128n��[Line ] WARNING: HTTP/1.x protocol enabled without HTTP/2 - Prefer HTTP/2 for better security and performance. Severity: MEDIUMI |[Line ] ISSUE: Weak cipher suite keyword detected in array: '' - Use stronger cryptographic algorithms. Severity: CRITICAL"�[Line ] ISSUE: Hardcoded password/sensitive string assigned to variable: '' - Store credentials securely (e.g., environment variables, KeyVault). Severity: CRITICAL$129%lm'130(jk*/(Lcom/github/javaparser/ast/stmt/CatchClause;)V,y[Line ] WARNING: Overly broad catch for '' with minimal error handling - May hide critical exceptions. Severity: MEDIUM.f  [Line ]  - Method 'verify' unconditionally returns true, implying no validation. Severity: CRITICAL0a  [Line ]  - Method '' unconditionally returns true, implying no validation. Severity: CRITICAL21313z{5X  [Line ]  - Method '' catches  and may swallow validation errors. Severity: CRITICAL71328��:�[Line ] ISSUE: Weak cipher suite enabled via setEnabledCipherSuites():  - Use stronger cryptographic algorithms. Severity: CRITICAL<133=��?�[Line ] ISSUE: Insecure SSL/TLS protocol enabled via setEnabledProtocols():  - Known vulnerabilities exist. Severity: CRITICALA134B��Dp[Line ] ISSUE: Non-PFS cipher suite enabled:  - Prefer ECDHE cipher suites for forward secrecy. Severity: HIGHF135G���J136KLMNO"java/lang/invoke/LambdaMetafactorymetafactory�(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodHandle;Ljava/lang/invoke/MethodType;)Ljava/lang/invoke/CallSite;Q137RSToU$java/lang/invoke/StringConcatFactory�(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite;InnerClassesX%java/lang/invoke/MethodHandles$LookupZjava/lang/invoke/MethodHandlesLookup ,a*��b:a138�*+,�	W+�
����#��'>+�+/�1�s+�7�:�i+�7�>�B�DG�I�+�7�>�B�DM�I�?+�O�R�V�Z��[�\�_�#�`�d6��g�m�q+�+w�1�D+�7�:�:+�7�>�B�Dy�I�+�7�>�B�D{�I�+�}����+�+��1�+�+��1�p+�}���e+�����Z+������:����C+�����8+������:����I�����I��g���q+�+��1�R+�7�:�H+�7�>�B�D��I�3+�}���(+�����+��������g���q+�+¶1�D+�7�:�:+�7�>�B�DĶI�%+�}���+���ƙ�g���q+�+ʶ1�S+�}���H+��:���9����:̶I��g���q϶I��g���q+�+Ҷ1��+�}����+��:�ԙ���:�۶�7�۶����&�۶�������g���q���۶�~�۶�:����:��`���:�	�I�	:		��:�7	��>�B���&	��>�B������g�
�q����+�+�1�P+�7�:�F+�7�>�B�D�I�0+�}���%+����+������g��q+�+�1�h+�7�:�^+�7�>�B�D�I�H+�}���=+��:���.������:����g�"�%�q+�+&�1�D+�7�:�:+�7�>�B�Dy�I�+�7�>�B�D{�I�+�}�(��+�+w�1�D+�7�:�:+�7�>�B�Dy�I�+�7�>�B�D{�I�+�}�)��+�+*�1�V+�}���K+��:���<����:,�.�'1�I�3�I��g�5�q+�+�1�h+�7�:�^+�7�>�B�D6�I�H+�}���=+��:���.������:�8���g�"�;�q+�+<�1�1+�7�:�'�>+�7�>�B�D�B��g�E�q+�b�q>@!C.D8EMFaHjIrJzK~M�O�P�U�V�W�X�Z�i�jkln%o/p:qGrVsato{||�}������������������.�5�=�G�Q�]�g�s�����������������������#�0�A�S�_�b�e�s�}��������������������� �1�?�I�r��������������,:DZdks������ �$cb�a;?�^22�
�Z�L�EB2��kB����c��M�q�@?�_�q:am*+,�FW+�I�L���#��'>+�M�QT�1�w+�V�:�m+�V�>��`+�V�>�:�+W�1�F�}���:���Y�.���\:�M�Q��`�I��g�b�q+�M�Qc�1�E+�V�e�V�f��g�\�h�V�i��:6��g�j�q+�k�:�@+�M�QG�1�+�M�QM�1�"�g�n�q+�k�>���o��+�M�Qp�1�+�r�s��g�v�q+�k�:�2+�M�Qw�1�"�g�y�q+�k�>���z��+�M�Q{�1�+�M�Q}�1�;6+�r��:��
��B:���������+��1�u�������������	6��������7�:�����7�>�B�������7�>�B����������q6�n���c��:���:�Q���>��:����:		��0	��B:139140���141��142���	6���̧����g+�M�Q���q+�M�Q��1��g���q+�b�<)+!.2/<0H2T3d4q5z7�8�9�?�@�A�B�C�D�E�F�H�I�NOPR+T>~OX�d�o�~����������������"�l�o�r�z�������������������������cP���Q'%8��6B!�O�0���-B��J��a~F*+,��W+�������#��'>+�����+��������g���q+�b��!�,�8�D�c�D	aw�*+,��W+�������#��'>+������+�����ö�ɶ1��+�˶:�~+�˶>���q+�˶>��:���̺�����������6�8���̺�������������g���q+������+�����ö�ɶ1��+�˶:��+�˶>���t+�˶>��:����:��T��B:���=������:���Y��W������g���q����+�˶:�J+�˶>�B���:+�˶>�B������:�������g���q+�b�!��!�,�B�L�X�d�q�{�����������������������	�)�1�>�Z�h�k�n����	c���L��W��PaT0*+,��W+�������#��'>+������+�b!.!A�a"143*+,���b:d	A�a"144*+,���b:d	A�a"145*+,��146�b:d	AHa"147*+,��
�b:d	Aa"148*+,���b:d	Aea"149*+,��150�b:d	Afa"151*+,���b:d	Aga"152*+,��
�b:d	Aha"153*+,���b:d	Aia"154*+,���b:d	155jka��+��M,�R��,�R�QN-�1�
-�1�j+� ���s�P+� �����O+� �"��A+� �"����-+� �"�����+&�1��g-�(�q�b.+9GUi�� c�+�2�Y�156lma *�)��b157n�a */�.�b�158opa *�����b�159q�a *1���b�160rpa *�����b�161sma *�)��b�162tma *�)��b�163uva�+�3��+�3M,�56�1��,�8�:�~,�8�>��N-����:��`���:�	�I�	:��:�7��>�B���&��>�B������g�:�q�����b:���#�.�M�U�\�i�z���������c�73��c�164wvaY�+�3��+�3M,�5N;-�1�/-�1��,�8�:��,�8�>��:����:������:�	�M�	:��:�8��>�B���'��>�B������g-�=�q�'�!�����:��-�>����z�bJUVWY.Z:[Z\b]i^v_�`�a�b�d�e�f�w�zc)�$32���d���x165z{a	�,��N-�R��-�R�Q:�1�$�1�A�1�C�1�l,� ���s�P,� �����Q,� �"��C,� �"����/,� �"�����+&�1��g+�E�q�b2ghij3kDlRm`nno�p�q�uc�D�2�Y�166|}a*�H�bE167~a*�H�bD168��a*�J�bC169��a*���bB170�a*���bA171�ma *�)��b+172��a�X+�K�+�N���R���@+���9+������M���,Y��W������g,�"�S�q�b���!�,�G�W�c<173��ao>+���9+������M���,Y��W������g,�"�S�q�b���-�=�c=174��a�I+�K�+�N���T���1+���*+������M�,���g,�"�U�q�b���!�,�8�H�c-175��a`/+���*+������M�,���g,�"�U�q�b����.�c.176��aA+�K�+�N���V���b[\ec177��ai8+���3+����M�W��,Y��W������g,�Z�q�b]^_*`7cc7178��a"179*�[��bK180��aN#*�\]�I�*�\_�I���_�bKLKc@181��a *�3�8�bJ182�a*�3�bI183�ma *�)��b@���������=I���I���I���I���P�I���P�P�P�P�P�P�P�P�P�I���I���P�P�P�I���P�I���I���I���I���I���P�P�I���P�P�I���P�PI��PI��I�I�I�I�I�PI�PP!I�#�I�&)P+P-P/I�1)P4I�6�P9I�;�P>I�@�PCI�EHVWY[