December 27, 2011

"SSL Audit" - Updated release (SSL/TLS Scanner)


Preamble :
During my research on TLS/SSL Compatibility across different Operation Systems and Browsers I created supporting tools for myself and later decided to release them for the public.

"SSL Audit" remotely scans web servers for SSL support - unlike other tools it is not limited to ciphers supported by underlying SSL engines such as "OpenSSL" or "NSS" but can detect cipher suites based on it's own (simplistic) SSL/TLS engine. As a gimmick it features an innovative Fingerprinting engine that is based on behavioral heuristics.




Surprisingly I had positive feedback about the tool and hence think it's worthwhile to update it.

Updates:
  • Added an option to export the results (CSV)
  • Adjusted documentation
Download:
Documentation:



Video:



No comments:

Post a Comment