https://github.com/dinotools/pysslscan
Framework and command-line tool to scan SSL enabled services
https://github.com/dinotools/pysslscan
python python3 scanner ssl
Last synced: 11 months ago
JSON representation
Framework and command-line tool to scan SSL enabled services
- Host: GitHub
- URL: https://github.com/dinotools/pysslscan
- Owner: DinoTools
- License: lgpl-3.0
- Created: 2014-05-11T20:15:12.000Z (about 12 years ago)
- Default Branch: master
- Last Pushed: 2016-02-21T20:50:30.000Z (over 10 years ago)
- Last Synced: 2025-07-19T04:54:05.940Z (12 months ago)
- Topics: python, python3, scanner, ssl
- Language: Python
- Homepage: pysslscan.rtfd.org
- Size: 231 KB
- Stars: 36
- Watchers: 4
- Forks: 12
- Open Issues: 6
-
Metadata Files:
- Readme: README.rst
- Changelog: CHANGELOG.rst
- License: LICENSE
Awesome Lists containing this project
README
pySSLScan
=========
pySSLScan is a framework to scan SSL enabled services, in order to determine
the supported ciphers, preferred ciphers, certificate information and more.
It is designed to be flexible, lean and fast.
It can be used as a library in other software projects and provides a command-line tool to get started.
You can find more information in the `documentation`_.
Features
--------
* Query SSL services
* Supported cryptographic protocols:
* SSLv2, SSLv3, TLS 1.0, TLS 1.1 and TLS 1.2
* DTLS 1.0 and DTLS 1.2
* Supported Protocols:
* TCP, HTTP, IMAP, POP3, SMTP, LDAP and RDP
* UDP
* IPv4 and IPv6
* Scan modules:
* Supported ciphers
* Ciphers preferred
* Supported compression methods
* Supported elliptic curves
* Test support for Signaling Cipher Suite Value (SCSV)
* Extract EC Point Formats
* Server certificate (requires pyOpenSSL)
* Test renegotiation (requires pyOpenSSL)
* Detect vulnerabilities
* Heartbleed
* Extract server information: HTTP, IMAP, POP3 and SMTP
* Rule based result highlighting
* Output formats:
* text/terminal
Install
-------
Requirements:
* Python 2.7 or Python >= 3.2
* Python packages:
* flextls >= 0.3
* six >= 1.4.1
* Python packages(optional):
* cryptography >= 0.5
* pyOpenSSL >= 0.14
Install:
At the time of writing pySSLScan requires the development version of the cryptography packages. Use the source directly from the git repository. https://github.com/pyca/cryptography
.. code-block:: console
$ pip install sslscan
Install Terminal(Stable, since 0.6):
Install pySSLScan and all dependencies to optimize terminal usage.
.. code-block:: console
$ pip install 'sslscan[terminal]'
Install Terminal(Development):
.. code-block:: console
$ pip install -e '.[terminal]'
Usage
-----
To scan a HTTPS service:
.. code-block:: console
$ pysslscan scan --scan=protocol.http --scan=vuln.heartbleed --scan=server.renegotiation \
--scan=server.preferred_ciphers --scan=server.ciphers \
--report=term:rating=ssllabs.2009e --ssl2 --ssl3 --tls10 --tls11 --tls12 http://example.org
To display more information:
.. code-block:: console
$ pysslscan --help
License
-------
Published under the LGPLv3+ (see LICENSE for more information)
.. _`documentation`: http://pysslscan.readthedocs.org/