← retour aux outils back to tools

# SSLScan

Scanner SSL/TLS rapide identifiant les chiffrements supportés, versions de protocole, détails de certificats et configurations faibles. Fast SSL/TLS scanner identifying supported ciphers, protocol versions, certificate details, and weak configurations.

↗ https://github.com/rbsec/sslscan

## Overview

SSLScan queries SSL/TLS services and reports supported protocols, cipher suites, certificate details, and known issues. Colour-coded output makes weak configurations immediately visible.

## Common Usage

    # Basic scan
    sslscan target.com
    sslscan target.com:8443

Scan without connecting to the target (just show what would be tested)

    sslscan --no-connect target.com

Show certificate details

    sslscan --show-certificate target.com

Scan a list of hosts

    sslscan --targets=hosts.txt

XML output

    sslscan --xml=results.xml target.com

TLS 1.3 only

    sslscan --tls13 target.com

Disable colour (for piping/logging)

    sslscan --no-colour target.com

## What to Look For

Critical findings (red):

- SSLv2, SSLv3 enabled
- TLS 1.0, TLS 1.1 enabled
- RC4, DES, 3DES, EXPORT, NULL ciphers

Warnings (yellow):

- Certificate expiry
- Self-signed certificate
- Missing HSTS

Certificate SAN:

- Subject Alternative Names often reveal internal hostnames and additional domains

Help / Man page

    sslscan [options] [host:port | host]

    TARGET:
      host              Target hostname or IP
      host:port         With non-standard port (default: 443)
      --targets=FILE    File of targets (one per line)

    SCAN OPTIONS:
      --ssl2            Only check SSLv2
      --ssl3            Only check SSLv3
      --tls10           Only check TLS 1.0
      --tls11           Only check TLS 1.1
      --tls12           Only check TLS 1.2
      --tls13           Only check TLS 1.3
      --tlsall          Check all TLS versions

    CERTIFICATE:
      --show-certificate  Show full certificate info
      --no-check-certificate  Don't verify certificate

    OUTPUT:
      --xml=FILE        XML output file
      --no-colour       Disable color output
      --verbose         More detailed output

    MISC:
      --connect-timeout=N  Connection timeout (default: 3s)
      --sleep=N         Milliseconds between requests
      --no-connect      Don't connect (just show config)
      --ipv4 / --ipv6   Force IP version

## Vue d’ensemble

SSLScan interroge les services SSL/TLS et rapporte les protocoles supportés, les suites de chiffrement, les détails des certificats et les problèmes connus. La sortie codée par couleur rend les configurations faibles immédiatement visibles.

## Utilisation courante

    # Scan de base
    sslscan target.com
    sslscan target.com:8443

    # Scanner sans se connecter à la cible (afficher seulement ce qui serait testé)
    sslscan --no-connect target.com

    # Afficher les détails du certificat
    sslscan --show-certificate target.com

    # Scanner une liste d'hôtes
    sslscan --targets=hosts.txt

    # Sortie XML
    sslscan --xml=results.xml target.com

    # TLS 1.3 uniquement
    sslscan --tls13 target.com

    # Désactiver les couleurs (pour les redirections/journaux)
    sslscan --no-colour target.com

## Ce qu’il faut rechercher

Résultats critiques (rouge) :

- SSLv2, SSLv3 activés
- TLS 1.0, TLS 1.1 activés
- Chiffrements RC4, DES, 3DES, EXPORT, NULL

Avertissements (jaune) :

- Expiration du certificat
- Certificat auto-signé
- HSTS manquant

SAN du certificat :

- Les Subject Alternative Names révèlent souvent des noms d’hôtes internes et des domaines supplémentaires

Aide / Page de manuel

    sslscan [options] [host:port | host]

    TARGET:
      host              Target hostname or IP
      host:port         With non-standard port (default: 443)
      --targets=FILE    File of targets (one per line)

    SCAN OPTIONS:
      --ssl2            Only check SSLv2
      --ssl3            Only check SSLv3
      --tls10           Only check TLS 1.0
      --tls11           Only check TLS 1.1
      --tls12           Only check TLS 1.2
      --tls13           Only check TLS 1.3
      --tlsall          Check all TLS versions

    CERTIFICATE:
      --show-certificate  Show full certificate info
      --no-check-certificate  Don't verify certificate

    OUTPUT:
      --xml=FILE        XML output file
      --no-colour       Disable color output
      --verbose         More detailed output

    MISC:
      --connect-timeout=N  Connection timeout (default: 3s)
      --sleep=N         Milliseconds between requests
      --no-connect      Don't connect (just show config)
      --ipv4 / --ipv6   Force IP version