testssl.sh Logo

testssl.sh

0
Free
Visit Website

testssl.sh is a free command line tool that checks a server's service on any port for the support of TLS/SSL ciphers, protocols, and cryptographic flaws. It provides clear and machine-readable output, works on various operating systems, and does not require additional installations. The tool offers flexibility to test any SSL/TLS enabled service, not limited to web servers, and ensures reliability, privacy, and freedom as it is open source under GPLv2 license.

FEATURES

ALTERNATIVES

A tool to run YARA rules against node_module folders to identify suspicious scripts

A vulnerable web site in NodeJS for testing security source code analyzers.

Vulnerable Android application for learning security concepts.

A list of vulnerable applications for testing and learning

A tool to find and search for registered CVEs, creating a local CVE database for offline use.

Powerful PowerShell script for identifying missing software patches for local privilege escalation vulnerabilities.

A vulnerability and exposure management platform that unifies security tool data, automates workflows, and provides risk-based prioritization for enterprise vulnerability management programs.

Crt.sh is a website that allows users to search for SSL/TLS certificates of a targeted domain, providing transparency into certificate logs.