Skip to main content

Framework and command-line tool to scan SSL enabled services

Project description

pySSLScan is a framework to scan SSL enabled services, in order to determine the supported ciphers, preferred ciphers, certificate information and more. It is designed to be flexible, lean and fast.

It can be used as a library in other software projects and provides a command-line tool to get started.

You can find more information in the documentation.

Features

  • Query SSL services
  • Supported cryptographic protocols: SSLv2, SSLv3, TLS 1.0, TLS 1.1 and TLS 1.2 (depends on used OpenSSL library)
  • Supported Protocols like TCP, HTTP, SMTP, …
  • IPv4 and IPv6
  • Rule based result highlighting
  • Output formats: text/terminal

Install

Requirements:

  • Python 2.7 or Python >= 3.2
  • Python packages:
    • cryptography >= 0.5
    • pyOpenSSL >= 0.14
    • six >= 1.4.1

Install:

At the time of writing pySSLScan requires the development version of the cryptography packages. Use the source directly from the git repository. https://github.com/pyca/cryptography

$ pip install sslscan

Usage

To scan a HTTPS service:

$ pysslscan scan --scan=protocol.http --scan=vuln.heartbleed --scan=server.renegotiation \
  --scan=server.preferred_ciphers --scan=server.ciphers \
  --report=term:rating=ssllabs.2009e --ssl2 --ssl3 --tls10 --tls11 --tls12 http://example.org

To display more information:

$ pysslscan --help

License

Published under the LGPLv3+ (see LICENSE for more information)

Project details


Release history Release notifications

History Node

0.5.1

History Node

0.5

History Node

0.4

This version
History Node

0.2

History Node

0.1

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Filename, size & hash SHA256 hash help File type Python version Upload date
sslscan-0.2.tar.gz (18.5 kB) Copy SHA256 hash SHA256 Source None Jul 28, 2014

Supported by

Elastic Elastic Search Pingdom Pingdom Monitoring Google Google BigQuery Sentry Sentry Error logging CloudAMQP CloudAMQP RabbitMQ AWS AWS Cloud computing Fastly Fastly CDN DigiCert DigiCert EV certificate StatusPage StatusPage Status page