SSLyze V0.6 – SSL Server Configuration Scanning Tool

What is SSL?

SSL (Secure Sockets Layer) is a standard security technology for establishing an encrypted link between a server and a client—typically a web server (website) and a browser; or a mail server and a mail client. SSL allows sensitive information such as credit card numbers, social security numbers, and login credentials to be transmitted securely. Normally, data sent between browsers and web servers is sent in plain text—leaving you vulnerable to eavesdropping. If an attacker is able to intercept all data being sent between a browser and a web server they can see and use that information.

In this article, i have provided SSLyze, read more about it below;

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify misconfigurations affecting their SSL servers.

Features:

SSL 2.0/3.0 and TLS 1.0/1.1/1.2 compatibility

Performance testing: session resumption and TLS tickets support

Security testing: weak cipher suites, insecure renegation, CRIME and THC-SSL DOS attacks

Server certificate validation

Support for StartTLS with SMTP and XMPP, and traffic tunneling through an HTTPS proxy

Client certificate support for servers performing mutual authentication

Scan results can be written to an XML file for further processing

While v0.5 saw the addition of a server side check for the CRIME attack, that uses SSL Compression, v0.6 also has significant improvements. New in v0.6;

Added support for Server Name Indication; see –sni

Partial results are returned when the server requires client authentication but no client certificate was provided

Preliminary IPv6 support

Various bug fixes and better support of client authentication and HTTPS tunneling.

Supported OS:

Linux

Windows 32 bit

Windows 64 bit

Note: Do Not Use Any Tutorial Of This Blog To Harm Anyone. This Is Only For Educational Purpose. I Will Not Be Responsible For Anything Done By You.

Sizes: 3.4 MB