$OC^3$ - OpenConnect Credentials Collector

Smol tool for collecting OpenConnect honeypot credentials

Installation

1. Force TLS cipher-suite in TLS_RSA_WITH_AES_128_CBC_SHA:
   • sudo nano /etc/ocserv/ocserv.conf > tls-priorities="NONE:+VERS-TLS-ALL:+MAC-ALL:+RSA:+AES-128-CBC:+SIGN-ALL:+COMP-NULL"
2. sudo apt install tshark
3. pip3 install -r requirements.txt
4. EZ

Run

Live: python3 oc3.py --live -i eth0 -I 1.2.3.4 -p 8443 -k /etc/ocserv/server-key.pem
Extract from dump: python3 oc3.py -I 1.2.3.4 -p 8443 -k /etc/ocserv/server-key.pem -f /tmp/captured_sessions.pcapng