An open API service indexing awesome lists of open source software.

https://github.com/bararchy/ruby-sslscanner

A simple and easy to use SSL Cipher scanner
https://github.com/bararchy/ruby-sslscanner

Last synced: over 1 year ago
JSON representation

A simple and easy to use SSL Cipher scanner

Awesome Lists containing this project

README

          

ruby-SSLscanner
===============

A simple and easy to use SSL Cipher scanner

Dependencies
--------------
Ruby 2.0.0 or Higher (ruby 1.9.0 should also work)

Colorize gem

Installation

```
gem install ScanSSL
```

Or

--------------
Clone the repo

1) ``` git clone https://github.com/bararchy/ruby-SSLscanner.git ```

2) ``` cd ruby-SSLscanner ```

3) ``` gem install colorize ```

4) ``` gem install prawn ```

5) ``` ruby sslscanner.rb -s google.com -p 443 -c ```

Usage
-------------

```bash
Usage: sslscanner.rb: [-s ] [-p ] [-d ] [-c ] [-o ] [-t ]
```

Added the '-h' option to allow importing a hosts file, the host file should have a server:port for each line.

./sslscanner.rb -s google.com -p 443 -c

Output:
![alt text][scan]

[scan]: https://sc-cdn.scaleengine.net/i/9cfb397e1c8796848d0648ab0687aa50.png "Example Scan"

TO-DO
=============
- [ ] More check for vulnerable cipher combinations
- [x] Checks for insecured TLS renogotiation
- [ ] Checks for:
- [ ] Heartbleed
- [x] Crime
- [x] Checks for weak certificate key algorithms
- [x] Option to import hosts from file
- [ ] multithreading when scanning multiple hosts
- [ ] Option to export data to file:
- [x] txt
- [x] pdf
- [ ] html
- [ ] csv
- [ ] Some kind of a nice "loading bar" while results are geathred
- [x] Use OptionParser or [Cli.k](https://github.com/rubyworks/clik) for command line options
- [x] Multithreading on Protocols (speeds scan 4 times)

[Licensed under MIT](license.txt)

Special thanks to:
* @ik5 (idokan@gmail.com).
* Dor Lerner (dorl3rn3r@gmail.com).
* @elichai
* @wolfedale "Pawel"