SSLScan

SSLScan is a super handy tool for scanning SSL services quickly. It figures out which ciphers are supported and shows you the preferred ones, along with the service certificate. Plus, if you want, you can provide your own certificate and private key to use with it.

Building SSLScan

If you're into coding, you can build sslscan yourself! Just run this command:

gcc -lssl -o sslscan sslscan.c

Using SSLScan: Command Line Options

The command line for SSLScan looks like this:

sslscan [Options] [host:port | host]

Your Options Explained

• --targets=< file >: Use a file with a list of hosts to check. You can add ports too (like host:port).


• --no-failed: Only show accepted ciphers (by default, it lists all ciphers).


• --ssl2: Check only SSLv2 ciphers.


• --ssl3: Check only SSLv3 ciphers.


• --tls1: Check only TLSv1 ciphers.


• --pk=< file >: Use a file with your private key or a PKCS#12 file that has both a private key and certificate pair (like those from MSIE or Netscape).


• --pkpass=< password >: The password for your private key or PKCS#12 file.


• --certs=< file >: A file with PEM/ASN1 formatted client certificates.


• --xml=< file >: Output results to an XML file.


• --version: Show the program version.


• --help: Display help text for using the program.

A Handy Tool for Everyone!

If you're looking to download this awesome tool, check it out on our site! You can find more details about it at our software directory: Download SSLScan. It's great for anyone needing to manage SSL services efficiently!