Using testssl.sh
Testssl project has announced the release of testssl 2.6. testssl.sh is a free command line tool which checks a server's service on any port for the support of TLS/SSL ciphers, protocols as well as recent cryptographic flaws.
Here is some examples of how to use testssl.sh:
First you have to download the script from:
Running the script without any option will run all the tests:
testssl.sh google.com
If you like to check for a specific vulnerability such as heartbleed you can run the following option
To check the supported ciphers suites you can use the –f option:
./testssl.sh –f Microsoft.com
Another neat option is –H which will give you some information about the http header and it will mark the security features
./testssl.sh –H isc.sans.edu
Keywords:
1 comment(s)
×
Diary Archives
Comments
Anonymous
Sep 21st 2015
9 years ago