SSLyze
Fast and full-featured SSL scanner for Python 2.7.
Description
SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify mis-configurations affecting their SSL servers.
Key features include:
- Multi-processed and multi-threaded scanning: it's very fast.
- Support for all SSL protocols, from SSL 2.0 to TLS 1.2.
- NEW: SSLyze can also be used as a library, in order to run scans and process the results directly from Python.
- Performance testing: session resumption and TLS tickets support.
- Security testing: weak cipher suites, insecure renegotiation, CRIME, Heartbleed and more.
- Server certificate validation and revocation checking through OCSP stapling.
- Support for StartTLS handshakes on SMTP, XMPP, LDAP, POP, IMAP, RDP, PostGres and FTP.
- Support for client certificates when scanning servers that perform mutual authentication.
- Scan results can be written to an XML or JSON file for further processing.
- And much more !
No comments:
Post a Comment