testssl.sh

简介 testssl.sh 是一个免费的命令行工具，用于检查服务器上任意端口的服务是否支持 TLS/SSL 密码套件、协议以及一些加密漏洞。 主要特性 清晰的输出：您可以轻松判断结果是好是坏。 机器可读输出（CSV、两种 JSON 格式），同时也支持 HTML 输出。 无需安装或配置。无需 gems、CPAN、pip 等。 开箱即用：Linux、MacOS、FreeBSD、N...

knockbleed

knockbleed CVE-2014-0160 prueba masiva contra subdominios Requisitos: Knock Subdomain Scan por Gianni 'guelfoweb' Amato - https://github.com/guelfoweb/knock check-ssl-heartbleed por Steffen Ullrich - https://github.com/noxxi/p5-scripts perl python Uso: root@kitploit: sid@sweethome:$ ./knockbleed....

HackerOne: Insecure SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com

Hello, I just found some minor issue with RSA 2048 bits SHA1withRSA in b5s.hackerone-ext-content.com and a4l.hackerone-ext-content.com thru Qualys SSL Labs and wanted to report it. Proof of Concept https://www.ssllabs.com/ssltest/analyze.html?d=b5s.hackerone-ext-content.com Result: SHA1withRSA...

[SSLSmart] Smart SSL Cipher Enumeration

SSLSmart is a highly flexible and interactive tool aimed at improving efficiency and reducing false positives during SSL testing. A number of tools allow users to test for supported SSL ciphers suites, but most only provide testers with a fixed set of cipher suites. Further testing is performed b...