Unexpected SSL error

[BetterDefender]

I am using Python 3.12.6 to run dirsearch to scan HTTPS websites, but I am getting an 'Unexpected SSL error'. I have tried updating the SSL certificates used by Python and reinstalled the Python certificate module 'certifi', but the issue persists.

[kiveno]

The SSL error may be caused by incompatibility with the version of the urllib3 library. You can try upgrading or downgrading the urllib3 library to a compatible version. For example, downgrading to urllib3==1.26.5 may resolve the error.

[bargaina]

The SSL error may be caused by incompatibility with the version of the urllib3 library. You can try upgrading or downgrading the urllib3 library to a compatible version. For example, downgrading to urllib3==1.26.5 may resolve the error.SSL 错误可能是由于与 urllib3 库的版本不兼容引起的。您可以尝试将 urllib3 库升级或降级到兼容版本。例如，降级到 urllib3==1.26.5 可能会解决此错误。

It's useless, it still reports an error

[Xiaosesh]

还没解决嘛？新一点的版本都会报这个

[Mxbzz]

确实可以：
pip uninstall urllib3
pip install urllib3==1.26.15

[kiveno]

Proxy-Based SSL Bypass​​

​​Steps​​:

Deploy an intermediary proxy tool (e.g., ​​Burp Suite​​ or ​​Mitmproxy​​) to intercept and forward requests.
Configure the proxy to ​​ignore SSL certificate validation​​ (e.g., in Burp Suite, disable certificate checks under Proxy > Options > SSL Pass Through)

.
Direct Dirsearch to use the proxy via the --proxy flag:

bash

dirsearch -u https://target.com --proxy http://127.0.0.1:8080  

The proxy acts as a "man-in-the-middle," handling SSL handshakes while bypassing certificate errors.

​​Why It Works​​:
Proxy tools like Burp Suite can override SSL validation logic, allowing Dirsearch to interact with HTTPS targets without requiring direct SSL/TLS adjustments in Python
.

The SSL error may be caused by incompatibility with the version of the urllib3 library. You can try upgrading or downgrading the urllib3 library to a compatible version. For example, downgrading to urllib3==1.26.5 may resolve the error.SSL 错误可能是由于与 urllib3 库的版本不兼容引起的。您可以尝试将 urllib3 库升级或降级到兼容版本。例如，降级到 urllib3==1.26.5 可能会解决此错误。

It's useless, it still reports an error

[Xiaosesh]

Proxy-Based SSL Bypass​​

​​Steps​​:

Deploy an intermediary proxy tool (e.g., ​​Burp Suite​​ or ​​Mitmproxy​​) to intercept and forward requests.
Configure the proxy to ​​ignore SSL certificate validation​​ (e.g., in Burp Suite, disable certificate checks under Proxy > Options > SSL Pass Through)

. Direct Dirsearch to use the proxy via the --proxy flag:

bash

dirsearch -u https://target.com --proxy http://127.0.0.1:8080  

The proxy acts as a "man-in-the-middle," handling SSL handshakes while bypassing certificate errors.

​​Why It Works​​: Proxy tools like Burp Suite can override SSL validation logic, allowing Dirsearch to interact with HTTPS targets without requiring direct SSL/TLS adjustments in Python .

The SSL error may be caused by incompatibility with the version of the urllib3 library. You can try upgrading or downgrading the urllib3 library to a compatible version. For example, downgrading to urllib3==1.26.5 may resolve the error.SSL 错误可能是由于与 urllib3 库的版本不兼容引起的。您可以尝试将 urllib3 库升级或降级到兼容版本。例如，降级到 urllib3==1.26.5 可能会解决此错误。

It's useless, it still reports an error

NICE！完美解决，博主泰裤辣！