retour aux outils back to tools Ducklings

SSLScan

Scanner SSL/TLS rapide identifiant les chiffrements supportés, versions de protocole, détails de certificats et configurations faibles. Fast SSL/TLS scanner identifying supported ciphers, protocol versions, certificate details, and weak configurations.

↗ https://github.com/rbsec/sslscan

Overview

SSLScan queries SSL/TLS services and reports supported protocols, cipher suites, certificate details, and known issues. Colour-coded output makes weak configurations immediately visible.

Common Usage

# Basic scan
sslscan target.com
sslscan target.com:8443

Scan without connecting to the target (just show what would be tested)

sslscan --no-connect target.com

Show certificate details

sslscan --show-certificate target.com

Scan a list of hosts

sslscan --targets=hosts.txt

XML output

sslscan --xml=results.xml target.com

TLS 1.3 only

sslscan --tls13 target.com

Disable colour (for piping/logging)

sslscan --no-colour target.com

What to Look For

Critical findings (red):

  • SSLv2, SSLv3 enabled
  • TLS 1.0, TLS 1.1 enabled
  • RC4, DES, 3DES, EXPORT, NULL ciphers

Warnings (yellow):

  • Certificate expiry
  • Self-signed certificate
  • Missing HSTS

Certificate SAN:

  • Subject Alternative Names often reveal internal hostnames and additional domains
Help / Man page 
sslscan [options] [host:port | host]

TARGET:
  host              Target hostname or IP
  host:port         With non-standard port (default: 443)
  --targets=FILE    File of targets (one per line)

SCAN OPTIONS:
  --ssl2            Only check SSLv2
  --ssl3            Only check SSLv3
  --tls10           Only check TLS 1.0
  --tls11           Only check TLS 1.1
  --tls12           Only check TLS 1.2
  --tls13           Only check TLS 1.3
  --tlsall          Check all TLS versions

CERTIFICATE:
  --show-certificate  Show full certificate info
  --no-check-certificate  Don't verify certificate

OUTPUT:
  --xml=FILE        XML output file
  --no-colour       Disable color output
  --verbose         More detailed output

MISC:
  --connect-timeout=N  Connection timeout (default: 3s)
  --sleep=N         Milliseconds between requests
  --no-connect      Don't connect (just show config)
  --ipv4 / --ipv6   Force IP version

Vue d’ensemble

SSLScan interroge les services SSL/TLS et rapporte les protocoles supportés, les suites de chiffrement, les détails des certificats et les problèmes connus. La sortie codée par couleur rend les configurations faibles immédiatement visibles.

Utilisation courante

# Scan de base
sslscan target.com
sslscan target.com:8443

# Scanner sans se connecter à la cible (afficher seulement ce qui serait testé)
sslscan --no-connect target.com

# Afficher les détails du certificat
sslscan --show-certificate target.com

# Scanner une liste d'hôtes
sslscan --targets=hosts.txt

# Sortie XML
sslscan --xml=results.xml target.com

# TLS 1.3 uniquement
sslscan --tls13 target.com

# Désactiver les couleurs (pour les redirections/journaux)
sslscan --no-colour target.com

Ce qu’il faut rechercher

Résultats critiques (rouge) :

  • SSLv2, SSLv3 activés
  • TLS 1.0, TLS 1.1 activés
  • Chiffrements RC4, DES, 3DES, EXPORT, NULL

Avertissements (jaune) :

  • Expiration du certificat
  • Certificat auto-signé
  • HSTS manquant

SAN du certificat :

  • Les Subject Alternative Names révèlent souvent des noms d’hôtes internes et des domaines supplémentaires
Aide / Page de manuel 
sslscan [options] [host:port | host]

TARGET:
  host              Target hostname or IP
  host:port         With non-standard port (default: 443)
  --targets=FILE    File of targets (one per line)

SCAN OPTIONS:
  --ssl2            Only check SSLv2
  --ssl3            Only check SSLv3
  --tls10           Only check TLS 1.0
  --tls11           Only check TLS 1.1
  --tls12           Only check TLS 1.2
  --tls13           Only check TLS 1.3
  --tlsall          Check all TLS versions

CERTIFICATE:
  --show-certificate  Show full certificate info
  --no-check-certificate  Don't verify certificate

OUTPUT:
  --xml=FILE        XML output file
  --no-colour       Disable color output
  --verbose         More detailed output

MISC:
  --connect-timeout=N  Connection timeout (default: 3s)
  --sleep=N         Milliseconds between requests
  --no-connect      Don't connect (just show config)
  --ipv4 / --ipv6   Force IP version