Deeps-2005/java-ssl-scanner

1����A
2
java/lang/Object
<init>
()V		3
java/lang/System
err
Ljava/io/PrintStream;
"Usage: java AutoPatcher <JavaFile>4
java/io/PrintStream
println
(Ljava/lang/String;)V
IThis tool attempts to automatically patch known SSL/JSSE vulnerabilities.
4The patched code will be printed to standard output.
java/io/FileInputStream56 !"
&com/github/javaparser/StaticJavaParser
parse
B(Ljava/io/InputStream;)Lcom/github/javaparser/ast/CompilationUnit;7$%
close'
java/lang/Throwable8&)*+

addSuppressed
(Ljava/lang/Throwable;)V-
java/io/IOException9,/01
10getMessage
()Ljava/lang/String;345
makeConcatWithConstants
8(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
748
&(Ljava/lang/String;)Ljava/lang/String;:
 AutoPatcher$SecurityPatchVisitor11912=>?@A
)com/github/javaparser/ast/CompilationUnit
accept
X(Lcom/github/javaparser/ast/visitor/GenericVisitor;Ljava/lang/Object;)Ljava/lang/Object;	CD
out13=FG1
toStringI
--- PATCH LOG START ---K
java/util/ArrayList	MNOPQ
AutoPatcher
	patchLogs
Ljava/util/Map;STUVW

java/util/Map
entrySet
()Ljava/util/Set;14JYZ
(Ljava/util/Collection;)V\]^
15applyAsInt
$()Ljava/util/function/ToIntFunction;`abcd
java/util/Comparator
comparingInt
:(Ljava/util/function/ToIntFunction;)Ljava/util/Comparator;fghij
java/util/List
sort
(Ljava/util/Comparator;)Vflmn
iterator
()Ljava/util/Iterator;pqrst
java/util/Iterator
hasNext
()Zpvwx
next
()Ljava/lang/Object;z
java/util/Map$Entryy|}x
getKey16����
java/lang/String
valueOf
&(Ljava/lang/Object;)Ljava/lang/String;y��x
getValue3�
--- PATCH LOG END ---�
sslv2�
sslv3�
tlsv1�
tlsv1.0�
tlsv1.117�����
java/util/Arrays
asList
%([Ljava/lang/Object;)Ljava/util/List;	M���
INSECURE_PROTOCOLS
Ljava/util/List;�
null�
anon�
export�
rc4�
des�
md5	M���
WEAK_CIPHER_KEYWORDS�
TLSv1.2�
TLSv1.3	M���
RECOMMENDED_PROTOCOLS�
%TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384�
'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384�
%TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256�
'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256	M���
RECOMMENDED_CIPHER_SUITES�
sha-1	M���
WEAK_HASHING_ALGORITHMS�
java/util/HashSet�
DocumentBuilderFactory�
SAXParserFactory�
XMLInputFactory18�Y	M���

XML_FACTORIES
Ljava/util/Set;�
java/util/LinkedHashMap19�
	Signature
$Ljava/util/List<Ljava/lang/String;>;
#Ljava/util/Set<Ljava/lang/String;>;
SENSITIVE_STRING_PATTERN
Ljava/lang/String;

ConstantValue�
2.*(password|pass|secret|key|pwd|salt|token|auth).*
6Ljava/util/Map<Ljava/lang/Integer;Ljava/lang/String;>;
STRONG_CIPHERS_ARRAY_EXPR�
^new String[]{"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"}
STRONG_PROTOCOLS_ARRAY_EXPR�
"new String[]{"TLSv1.2", "TLSv1.3"}
Code
LineNumberTable
main
([Ljava/lang/String;)V

StackMapTable�
[Ljava/lang/String;
20Exceptions�
java/lang/Exception
<clinit>
21SourceFile
AutoPatcher.java
NestMembers
BootstrapMethods�
Error reading file: 
 - 
�
Attempting to patch: 
�
(Ljava/lang/Object;)I	{�
(Ljava/util/Map$Entry;)I�
	Line 
: 
�22�


4

$java/lang/invoke/StringConcatFactory
�(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite;
23




	
"java/lang/invoke/LambdaMetafactory
metafactory
�(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodHandle;Ljava/lang/invoke/MethodType;)Ljava/lang/invoke/CallSite;
InnerClasses
SecurityPatchVisitor
Entry

%java/lang/invoke/MethodHandles$Lookup

java/lang/invoke/MethodHandles
Lookup!M24��
����
����
����
����
����
����
��25PQ
����
����
��

�

*�
�
�
	���
��*���
������*2L�Y+�N-�M-�#�:-�#�:�(��N�+-�.�2���+�6�,�9Y�;
�<W�B,�E��H��JY�L�R
�XN-�[�_�e-�k
:�o
�1�u
�y:��{
�~��
������˲���+07&9=@&"LO,�f=>
?@AD"F+G0H7FLKOHPI`JaMmPzS�V�X�Y�[�\�]�^�_�a	��
&��&
&��=��
,�=�Pfp�7�
��
����Y�SY�SY�SY�SY�S�����Y�SY�SY�SY�SY�SY�S�����Y�SY�S�����Y�SY�SY�SY�S�����Y�SY�S������Y�Y�SY�SY�S���̳ͻ�Y�ӳL�
�#L` ~(�)�1���
9��
��
�
����
�
269M
27yS