From c41e64651276f9d6781de6cce79ccb5daf986e00 Mon Sep 17 00:00:00 2001
From: Jacob Kraniak <113630934+jacob-kraniak@users.noreply.github.com>
Date: Sat, 7 Mar 2026 21:37:21 -0500
Subject: [PATCH] SSL Refactor: 2026-03-07 21:37:21
Affected files:
.obsidian/workspace.json
tools/security/ssl-tls-web-security.md
---
.obsidian/workspace.json | 20 ++---
tools/security/ssl-tls-web-security.md | 120 ++++++++++++++++++++-----
2 files changed, 106 insertions(+), 34 deletions(-)
diff --git a/.obsidian/workspace.json b/.obsidian/workspace.json
index c2f0995..ab32aa5 100644
--- a/.obsidian/workspace.json
+++ b/.obsidian/workspace.json
@@ -13,12 +13,12 @@
"state": {
"type": "markdown",
"state": {
- "file": "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
+ "file": "tools/security/ssl-tls-web-security.md",
"mode": "source",
"source": false
},
"icon": "lucide-file",
- "title": "web-dns-recon-tools"
+ "title": "ssl-tls-web-security"
}
}
]
@@ -94,7 +94,7 @@
"state": {
"type": "backlink",
"state": {
- "file": "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
+ "file": "tools/security/ssl-tls-web-security.md",
"collapseAll": false,
"extraContext": false,
"sortOrder": "alphabetical",
@@ -104,7 +104,7 @@
"unlinkedCollapsed": true
},
"icon": "links-coming-in",
- "title": "Backlinks for web-dns-recon-tools"
+ "title": "Backlinks for ssl-tls-web-security"
}
},
{
@@ -113,12 +113,12 @@
"state": {
"type": "outgoing-link",
"state": {
- "file": "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
+ "file": "tools/security/ssl-tls-web-security.md",
"linksCollapsed": false,
"unlinkedCollapsed": true
},
"icon": "links-going-out",
- "title": "Outgoing links from web-dns-recon-tools"
+ "title": "Outgoing links from ssl-tls-web-security"
}
},
{
@@ -156,13 +156,13 @@
"state": {
"type": "outline",
"state": {
- "file": "tools/security/pentest-recon-enum/web-dns-recon-tools.md",
+ "file": "tools/security/ssl-tls-web-security.md",
"followCursor": false,
"showSearch": false,
"searchQuery": ""
},
"icon": "lucide-list",
- "title": "Outline of web-dns-recon-tools"
+ "title": "Outline of ssl-tls-web-security"
}
},
{
@@ -196,8 +196,9 @@
},
"active": "9b2e89c682f5d2ef",
"lastOpenFiles": [
- "README.md",
+ "tools/security/Untitled.md",
"tools/security/pentest-recon-enum/web-dns-recon-tools.md",
+ "README.md",
"tools/security/pentest-recon-enum/pentest-arsenal.md",
"tools/INDEX.md",
"SOP-Navigation-and-Layout.md",
@@ -207,7 +208,6 @@
"tools/security/pentest-recon-enum/Packet Capture & Analysis.md",
"tools/security/pentest-recon-enum/Recon & Threat Reputation.md",
"tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md",
- "tools/security/Untitled.md",
"tools/security/ssl-tls-web-security.md",
"TOOL-TABLE-SCHEMA.md",
"tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
diff --git a/tools/security/ssl-tls-web-security.md b/tools/security/ssl-tls-web-security.md
index 9aec192..cef37ec 100644
--- a/tools/security/ssl-tls-web-security.md
+++ b/tools/security/ssl-tls-web-security.md
@@ -1,29 +1,101 @@
# SSL/TLS & Web Security Tools
-Online scanners, analyzers, configuration generators, Certificate Transparency resources, and related utilities for hardening web TLS/SSL.
+Online scanners, analyzers, configuration generators, Certificate Transparency (CT) resources, testing/demo sites, and utilities for assessing and hardening web TLS/SSL configurations.
+
+These tools help identify weak ciphers, protocol issues, certificate problems, CSP/HSTS misconfigurations, and more — essential for web pentesting, secure server setup, and compliance checks.
+
+[↑ Back to Security Tools INDEX](../_INDEX.md)
+[↑ Back to Tools Overview](../../_INDEX.md)
+
+
+SSL/TLS Scanners & Analyzers
+
+### SSL/TLS Scanners & Analyzers
+
+Deep analysis of server TLS configurations, vulnerabilities, compliance, and client support.
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
-| SSLLabs Server Test | https://www.ssllabs.com/ssltest/ | — | Deep analysis of public SSL/TLS server configuration and vulnerabilities. | ssl, tls, scanner, online, qualys, grading| — | 2011 | — |
-| ImmuniWeb SSL Security Test | https://www.immuniweb.com/ssl | — | Tests SSL/TLS for PCI DSS, HIPAA, NIST compliance and post-quantum readiness. | ssl, tls, compliance, pci, hipaa, scanner | — | 2015 | — |
-| SSL Check | https://www.jitbit.com/sslcheck/ | — | Scans websites for mixed/insecure content and common SSL configuration issues. | ssl, mixed-content, scanner, online | — | 2012 | — |
-| SSL Scanner | https://www.sslshopper.com/ssl-checker.html | — | Validates SSL certificate chain, expiry dates, and basic misconfigurations. | ssl, certificate, checker, online | — | 2008 | — |
-| CryptCheck | https://cryptcheck.fr/ | — | Evaluates TLS configuration, ciphers, protocols, and client handshake support. | tls, cipher, scanner, handshake, online | — | 2015 | — |
-| Report URI | https://report-uri.com/ | — | Monitors CSP, HPKP, HSTS, and certificate transparency policy violations. | csp, hsts, monitoring, reporting | — | 2015 | — |
-| CSP Evaluator | https://csp-evaluator.withgoogle.com/ | — | Analyzes and scores the effectiveness of Content Security Policies. | csp, security, policy, analyzer | — | 2018 | — |
-| Useless CSP | https://github.com/0xInfection/Useless-CSP | [0xInfection/Useless-CSP](https://github.com/0xInfection/Useless-CSP) | Collection exposing weak or useless CSP implementations on major websites. | csp, security, list, github | 2023-04-12 | 2020 | ~200 |
-| Why No HTTPS? | https://www.whynohttps.com/ | — | Tracks top websites lacking automatic HTTP to HTTPS redirection. | https, adoption, tracking, list | — | 2018 | — |
-| TLS Cipher Suite Search | https://ciphersuite.info/ | — | Searchable database of TLS cipher suites with security and support details. | cipher, tls, search, database | — | 2019 | — |
-| cipherli.st | https://syslink.pl/cipherlist | — | Provides strong cipher suite configurations for Apache, Nginx, and Lighttpd. | cipher, config, tls, server | — | 2014 | — |
-| dhtool | https://2ton.com.au/dhtool/ | — | Generates strong Diffie-Hellman parameters to improve forward secrecy. | dhparam, pfs, tls, generator | — | 2015 | — |
-| badssl.com | https://badssl.com/ | — | Site with intentionally broken SSL/TLS setups for testing client behavior. | tls, testing, badssl, client | — | 2015 | — |
-| tlsfun.de | https://tlsfun.de/ | — | Collection of live demos and tests for various TLS/SSL protocol edge cases. | tls, demo, testing, protocol | — | 2016 | — |
-| CAA Record Helper | https://sslmate.com/caa/ | — | Generates proper Certificate Authority Authorization (CAA) DNS records. | caa, dns, generator, certificate | — | 2017 | — |
-| Common CA Database (CCADB) | https://ccadb.my.salesforce-sites.com/ | — | Repository of Certificate Authority information, roots, and intermediates. | ca, certificate, database, root | — | 2017 | — |
-| CERTSTREAM | https://certstream.calidog.io/ | [Calidog/certstream](https://github.com/CaliDog/certstream) | Real-time streaming service for Certificate Transparency log updates. | ct, transparency, stream, real-time | 2025-11-20 | 2018 | ~400 |
-| crt.sh | https://crt.sh/ | — | Search engine for certificates logged in public Certificate Transparency logs. | ct, transparency, search, certificate | — | 2015 | — |
-| Hardenize | https://www.hardenize.com/ | — | Comprehensive security testing including TLS, email, headers, DNS, and CT logs. | hardening, scanner, tls, multi-protocol | — | 2018 | — |
-| Cipher suite compatibility | https://www.ssllabs.com/ssltest/viewMyClient.html | — | Tests TLS cipher and protocol compatibility from your current browser/client. | tls, compatibility, client, browser | — | 2011 | — |
-| security.txt | https://securitytxt.org/ | — | Standard and generator for security contact/policy disclosure on websites. | securitytxt, policy, contact, standard | — | 2017 | — |
-| Mozilla SSL Config Generator | https://ssl-config.mozilla.org/ | — | Generates secure TLS configurations following Mozilla guidelines for servers. | tls, config, generator, mozilla, server | — | 2016 | — |
-| TLScan | https://github.com/prbinu/tlscan | [prbinu/tlscan](https://github.com/prbinu/tlscan) | Pure Python tool to scan and enumerate SSL/TLS protocols and cipher suites. | tls, scanner, python, enumerator | 2022-08-15 | 2019 | ~50 |
\ No newline at end of file
+| SSLLabs Server Test | [ssllabs.com/ssltest](https://www.ssllabs.com/ssltest/) | — | Deep analysis of public SSL/TLS server configuration and vulnerabilities. | [ssl, tls, scanner, online, qualys, grading] | — | 2011 | — |
+| ImmuniWeb SSL Security Test | [immuniweb.com/ssl](https://www.immuniweb.com/ssl) | — | Tests SSL/TLS for PCI DSS, HIPAA, NIST compliance and post-quantum readiness. | [ssl, tls, compliance, pci, hipaa, scanner] | — | 2015 | — |
+| SSL Check | [jitbit.com/sslcheck](https://www.jitbit.com/sslcheck/) | — | Scans websites for mixed/insecure content and common SSL configuration issues. | [ssl, mixed-content, scanner, online] | — | 2012 | — |
+| SSL Scanner | [sslshopper.com/ssl-checker.html](https://www.sslshopper.com/ssl-checker.html) | — | Validates SSL certificate chain, expiry dates, and basic misconfigurations. | [ssl, certificate, checker, online] | — | 2008 | — |
+| CryptCheck | [cryptcheck.fr](https://cryptcheck.fr/) | — | Evaluates TLS configuration, ciphers, protocols, and client handshake support. | [tls, cipher, scanner, handshake, online] | — | 2015 | — |
+| Hardenize | [hardenize.com](https://www.hardenize.com/) | — | Comprehensive security testing including TLS, email, headers, DNS, and CT logs. | [hardening, scanner, tls, multi-protocol] | — | 2018 | — |
+| TLScan | [github.com/prbinu/tlscan](https://github.com/prbinu/tlscan) | [prbinu/tlscan](https://github.com/prbinu/tlscan) | Pure Python tool to scan and enumerate SSL/TLS protocols and cipher suites. | [tls, scanner, python, enumerator] | 2022-08-15 | 2019 | ~50 |
+
+
+
+
+Configuration Generators & Helpers
+
+### Configuration Generators & Helpers
+
+Tools to generate secure cipher suites, DH params, CAA records, and server configs.
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
+| cipherli.st | [syslink.pl/cipherlist](https://syslink.pl/cipherlist) | — | Provides strong cipher suite configurations for Apache, Nginx, and Lighttpd. | [cipher, config, tls, server] | — | 2014 | — |
+| Mozilla SSL Config Generator | [ssl-config.mozilla.org](https://ssl-config.mozilla.org/) | — | Generates secure TLS configurations following Mozilla guidelines for servers. | [tls, config, generator, mozilla, server] | — | 2016 | — |
+| dhtool | [2ton.com.au/dhtool](https://2ton.com.au/dhtool/) | — | Generates strong Diffie-Hellman parameters to improve forward secrecy. | [dhparam, pfs, tls, generator] | — | 2015 | — |
+| CAA Record Helper | [sslmate.com/caa](https://sslmate.com/caa/) | — | Generates proper Certificate Authority Authorization (CAA) DNS records. | [caa, dns, generator, certificate] | — | 2017 | — |
+
+
+
+
+Certificate Transparency & Certificate Resources
+
+### Certificate Transparency & Certificate Resources
+
+Search, monitor, and stream CT logs; CA databases.
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
+| crt.sh | [crt.sh](https://crt.sh/) | — | Search engine for certificates logged in public Certificate Transparency logs. | [ct, transparency, search, certificate] | — | 2015 | — |
+| CERTSTREAM | [certstream.calidog.io](https://certstream.calidog.io/) | [Calidog/certstream](https://github.com/CaliDog/certstream) | Real-time streaming service for Certificate Transparency log updates. | [ct, transparency, stream, real-time] | 2025-11-20 | 2018 | ~400 |
+| Common CA Database (CCADB) | [ccadb.my.salesforce-sites.com](https://ccadb.my.salesforce-sites.com/) | — | Repository of Certificate Authority information, roots, and intermediates. | [ca, certificate, database, root] | — | 2017 | — |
+
+
+
+
+Testing & Demo Sites
+
+### Testing & Demo Sites
+
+Intentionally flawed setups, edge-case demos, and client compatibility testers.
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
+| badssl.com | [badssl.com](https://badssl.com/) | — | Site with intentionally broken SSL/TLS setups for testing client behavior. | [tls, testing, badssl, client] | — | 2015 | — |
+| tlsfun.de | [tlsfun.de](https://tlsfun.de/) | — | Collection of live demos and tests for various TLS/SSL protocol edge cases. | [tls, demo, testing, protocol] | — | 2016 | — |
+| Cipher suite compatibility | [ssllabs.com/ssltest/viewMyClient.html](https://www.ssllabs.com/ssltest/viewMyClient.html) | — | Tests TLS cipher and protocol compatibility from your current browser/client. | [tls, compatibility, client, browser] | — | 2011 | — |
+
+
+
+
+Web Security Headers & Policies
+
+### Web Security Headers & Policies
+
+CSP analyzers, HSTS/CSP monitoring, adoption trackers, and security.txt.
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
+| Report URI | [report-uri.com](https://report-uri.com/) | — | Monitors CSP, HPKP, HSTS, and certificate transparency policy violations. | [csp, hsts, monitoring, reporting] | — | 2015 | — |
+| CSP Evaluator | [csp-evaluator.withgoogle.com](https://csp-evaluator.withgoogle.com/) | — | Analyzes and scores the effectiveness of Content Security Policies. | [csp, security, policy, analyzer] | — | 2018 | — |
+| Useless CSP | [github.com/0xInfection/Useless-CSP](https://github.com/0xInfection/Useless-CSP) | [0xInfection/Useless-CSP](https://github.com/0xInfection/Useless-CSP) | Collection exposing weak or useless CSP implementations on major websites. | [csp, security, list, github] | 2023-04-12 | 2020 | ~200 |
+| Why No HTTPS? | [whynohttps.com](https://www.whynohttps.com/) | — | Tracks top websites lacking automatic HTTP to HTTPS redirection. | [https, adoption, tracking, list] | — | 2018 | — |
+| security.txt | [securitytxt.org](https://securitytxt.org/) | — | Standard and generator for security contact/policy disclosure on websites. | [securitytxt, policy, contact, standard] | — | 2017 | — |
+
+
+
+
+Miscellaneous Resources
+
+### Miscellaneous Resources
+
+Cipher databases, TLS cipher search, and other utilities.
+
+| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
+|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
+| TLS Cipher Suite Search | [ciphersuite.info](https://ciphersuite.info/) | — | Searchable database of TLS cipher suites with security and support details. | [cipher, tls, search, database] | — | 2019 | — |
\ No newline at end of file