sslscan 0.5

Features

• Query SSL services

• Supported cryptographic protocols:

  • SSLv2, SSLv3, TLS 1.0, TLS 1.1 and TLS 1.2

  • DTLS 1.0 and DTLS 1.2

• Supported Protocols:

  • TCP, HTTP, IMAP, POP3, SMTP, LDAP and RDP

  • UDP

• IPv4 and IPv6

• Scan modules:

  • Supported ciphers

  • Ciphers preferred

  • Supported compression methods

  • Supported elliptic curves

  • Test support for Signaling Cipher Suite Value (SCSV)

  • Extract EC Point Formats

  • Server certificate (requires pyOpenSSL)

  • Test renegotiation (requires pyOpenSSL)

  • Detect vulnerabilities

    • Heartbleed

  • Extract server information: HTTP, IMAP, POP3 and SMTP

• Rule based result highlighting

• Output formats:

  • text/terminal

Install

Requirements:

• Python 2.7 or Python >= 3.2

• Python packages:

  • flextls >= 0.3

  • six >= 1.4.1

• Python packages(optional):

  • cryptography >= 0.5

  • pyOpenSSL >= 0.14

Install:

At the time of writing pySSLScan requires the development version of the cryptography packages. Use the source directly from the git repository. https://github.com/pyca/cryptography

$ pip install sslscan

Usage

To scan a HTTPS service:

$ pysslscan scan --scan=protocol.http --scan=vuln.heartbleed --scan=server.renegotiation \
  --scan=server.preferred_ciphers --scan=server.ciphers \
  --report=term:rating=ssllabs.2009e --ssl2 --ssl3 --tls10 --tls11 --tls12 http://example.org

To display more information:

$ pysslscan --help

License

Published under the LGPLv3+ (see LICENSE for more information)