more SSL tools: 2026-03-07 21:44:22
Affected files: .obsidian/workspace.json README.md tools/security/ssl-tls-web-security.md
This commit is contained in:
Jacob Kraniak
parent
fac5e8483a
commit
e30bc34366
|
|
@ -11,10 +11,14 @@
|
|||
"id": "903b0393c447bf77",
|
||||
"type": "leaf",
|
||||
"state": {
|
||||
"type": "empty",
|
||||
"state": {},
|
||||
"type": "markdown",
|
||||
"state": {
|
||||
"file": "tools/security/ssl-tls-web-security.md",
|
||||
"mode": "source",
|
||||
"source": false
|
||||
},
|
||||
"icon": "lucide-file",
|
||||
"title": "New tab"
|
||||
"title": "ssl-tls-web-security"
|
||||
}
|
||||
}
|
||||
]
|
||||
|
|
@ -190,11 +194,12 @@
|
|||
"obsidian-git:Open Git source control": false
|
||||
}
|
||||
},
|
||||
"active": "f3f577dcf6ffe86c",
|
||||
"active": "903b0393c447bf77",
|
||||
"lastOpenFiles": [
|
||||
"README.md",
|
||||
"tools/security/ssl-tls-web-security.md",
|
||||
"tools/security/Untitled.md",
|
||||
"tools/security/pentest-recon-enum/web-dns-recon-tools.md",
|
||||
"README.md",
|
||||
"tools/security/pentest-recon-enum/pentest-arsenal.md",
|
||||
"tools/INDEX.md",
|
||||
"SOP-Navigation-and-Layout.md",
|
||||
|
|
@ -204,7 +209,6 @@
|
|||
"tools/security/pentest-recon-enum/Packet Capture & Analysis.md",
|
||||
"tools/security/pentest-recon-enum/Recon & Threat Reputation.md",
|
||||
"tools/security/pentest-recon-enum/Port Scanners & Network Discovery.md",
|
||||
"tools/security/ssl-tls-web-security.md",
|
||||
"TOOL-TABLE-SCHEMA.md",
|
||||
"tools/sysadmin-devops/terminal-shell-productivity/Terminal Emulators.md",
|
||||
"tools/sysadmin-devops/terminal-shell-productivity/Files & Directories.md",
|
||||
|
|
|
|||
18
README.md
18
README.md
|
|
@ -90,24 +90,6 @@ When ready: Plan to squash-merge or rebase + clean history into main.
|
|||
| Tool Table Format | Schema used in every tool list | [TOOL-TABLE-SCHEMA.md](./TOOL-TABLE-SCHEMA.md) |
|
||||
|
||||
All tool-list markdown files follow the structure and linking rules defined in [TOOL-TABLE-SCHEMA.md](./TOOL-TABLE-SCHEMA.md).
|
||||
##### :black_small_square: SSL
|
||||
|
||||
<p>
|
||||
<a href="https://www.openssl.org/"><b>openssl</b></a> - is a robust, commercial-grade, and full-featured toolkit for the TLS and SSL protocols.<br>
|
||||
<a href="https://gnutls.org/manual/html_node/gnutls_002dcli-Invocation.html"><b>gnutls-cli</b></a> - client program to set up a TLS connection to some other computer.<br>
|
||||
<a href="https://github.com/nabla-c0d3/sslyze"><b>sslyze
|
||||
</b></a> - fast and powerful SSL/TLS server scanning library.<br>
|
||||
<a href="https://github.com/rbsec/sslscan"><b>sslscan</b></a> - tests SSL/TLS enabled services to discover supported cipher suites.<br>
|
||||
<a href="https://github.com/drwetter/testssl.sh"><b>testssl.sh</b></a> - testing TLS/SSL encryption anywhere on any port.<br>
|
||||
<a href="https://github.com/mozilla/cipherscan"><b>cipherscan</b></a> - a very simple way to find out which SSL ciphersuites are supported by a target.<br>
|
||||
<a href="http://www.tarsnap.com/spiped.html"><b>spiped</b></a> - is a utility for creating symmetrically encrypted and authenticated pipes between socket addresses.<br>
|
||||
<a href="https://github.com/certbot/certbot"><b>Certbot</b></a> - is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server.<br>
|
||||
<a href="https://github.com/FiloSottile/mkcert"><b>mkcert</b></a> - simple zero-config tool to make locally trusted development certificates with any names you'd like.<br>
|
||||
<a href="https://github.com/square/certstrap"><b>certstrap</b></a> - tools to bootstrap CAs, certificate requests, and signed certificates.<br>
|
||||
<a href="https://github.com/yassineaboukir/sublert"><b>Sublert</b></a> - is a security and reconnaissance tool to automatically monitor new subdomains.<br>
|
||||
<a href="https://github.com/trimstray/mkchain"><b>mkchain</b></a> - open source tool to help you build a valid SSL certificate chain.<br>
|
||||
<a href="https://github.com/Matty9191/ssl-cert-check"><b>ssl-cert-check</b></a> - SSL Certification Expiration Checker.<br>
|
||||
</p>
|
||||
|
||||
##### :black_small_square: Security
|
||||
|
||||
|
|
|
|||
|
|
@ -1,16 +1,17 @@
|
|||
# SSL/TLS & Web Security Tools
|
||||
|
||||
Online scanners, analyzers, configuration generators, Certificate Transparency (CT) resources, testing/demo sites, and utilities for assessing and hardening web TLS/SSL configurations.
|
||||
Online scanners, analyzers, configuration generators, Certificate Transparency (CT) resources, testing/demo sites, and utilities for assessing and hardening web TLS/SSL configurations.
|
||||
Also includes offline/CLI scanners, clients, and certificate management tools.
|
||||
|
||||
These tools help identify weak ciphers, protocol issues, certificate problems, CSP/HSTS misconfigurations, and more — essential for web pentesting, secure server setup, and compliance checks.
|
||||
These help identify weak ciphers, protocol issues, certificate problems, CSP/HSTS misconfigurations, and more — essential for web pentesting, secure server setup, and compliance.
|
||||
|
||||
[↑ Back to Security Tools INDEX](../_INDEX.md)
|
||||
[↑ Back to Tools Overview](../../_INDEX.md)
|
||||
|
||||
<details open>
|
||||
<summary>SSL/TLS Scanners & Analyzers</summary>
|
||||
<summary>SSL/TLS Scanners & Analyzers (Online)</summary>
|
||||
|
||||
### SSL/TLS Scanners & Analyzers
|
||||
### SSL/TLS Scanners & Analyzers (Online)
|
||||
|
||||
Deep analysis of server TLS configurations, vulnerabilities, compliance, and client support.
|
||||
|
||||
|
|
@ -24,6 +25,35 @@ Deep analysis of server TLS configurations, vulnerabilities, compliance, and cli
|
|||
| Hardenize | [hardenize.com](https://www.hardenize.com/) | — | Comprehensive security testing including TLS, email, headers, DNS, and CT logs. | [hardening, scanner, tls, multi-protocol] | — | 2018 | — |
|
||||
| TLScan | [github.com/prbinu/tlscan](https://github.com/prbinu/tlscan) | [prbinu/tlscan](https://github.com/prbinu/tlscan) | Pure Python tool to scan and enumerate SSL/TLS protocols and cipher suites. | [tls, scanner, python, enumerator] | 2022-08-15 | 2019 | ~50 |
|
||||
|
||||
[↑ Back to Top](#ssltls--web-security-tools)
|
||||
|
||||
</details>
|
||||
|
||||
<details>
|
||||
<summary>CLI & Offline SSL/TLS Scanners, Clients & Certificate Tools</summary>
|
||||
|
||||
### CLI & Offline SSL/TLS Scanners, Clients & Certificate Tools
|
||||
|
||||
Local/command-line tools for scanning TLS configurations, testing cipher support, certificate management, local dev certs, chain building, and expiration monitoring.
|
||||
|
||||
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|
||||
|-------------------|-----------------------------------------------------|-------------------------------------------------------|-----------------------------------------------------------------------------------|-----------------------------------------------|------------------|---------------|---------|
|
||||
| openssl | [openssl.org](https://www.openssl.org/) | [openssl/openssl](https://github.com/openssl/openssl) | Robust, full-featured toolkit implementing the SSL/TLS protocols and utilities. | [tls, ssl, crypto, toolkit, c] | 2026 | 1998 | 25k+ |
|
||||
| gnutls-cli | [gnutls.org](https://gnutls.org/) | [gnutls/gnutls](https://github.com/gnutls/gnutls) | Command-line client to establish and test TLS connections to remote servers. | [tls, client, gnutls, testing] | 2026 | 2000 | 1.5k+ |
|
||||
| sslyze | — | [nabla-c0d3/sslyze](https://github.com/nabla-c0d3/sslyze) | Fast and comprehensive SSL/TLS server scanning library and CLI tool. | [tls, scanner, python, library] | 2026 | 2012 | 3.5k+ |
|
||||
| sslscan | — | [rbsec/sslscan](https://github.com/rbsec/sslscan) | Tests SSL/TLS services to report supported cipher suites and protocol versions. | [tls, scanner, cipher, c] | ~2025 | 2005 | 2k+ |
|
||||
| testssl.sh | — | [drwetter/testssl.sh](https://github.com/drwetter/testssl.sh) | Bash script to test TLS/SSL encryption on any port with detailed vulnerability checks. | [tls, scanner, bash, offline] | 2026 | 2014 | 8k+ |
|
||||
| cipherscan | — | [mozilla/cipherscan](https://github.com/mozilla/cipherscan) | Simple tool to discover supported SSL/TLS cipher suites on a target. | [tls, cipher, scanner, python] | ~2020 | 2015 | 1k+ |
|
||||
| spiped | [tarsnap.com/spiped.html](https://www.tarsnap.com/spiped.html) | — | Utility for creating symmetrically encrypted and authenticated network pipes. | [encryption, tunnel, pipe, c] | ~2023 | 2011 | — |
|
||||
| Certbot | [certbot.eff.org](https://certbot.eff.org/) | [certbot/certbot](https://github.com/certbot/certbot) | EFF tool to automatically obtain and renew Let's Encrypt certificates. | [certificate, letsencrypt, automation, python] | 2026 | 2015 | 30k+ |
|
||||
| mkcert | — | [FiloSottile/mkcert](https://github.com/FiloSottile/mkcert) | Zero-config tool to generate locally-trusted development certificates. | [certificate, dev, local, go] | 2026 | 2018 | 50k+ |
|
||||
| certstrap | — | [square/certstrap](https://github.com/square/certstrap) | Tools to bootstrap your own certificate authority and sign certificates. | [ca, certificate, bootstrap, go] | ~2021 | 2015 | 2k+ |
|
||||
| Sublert | — | [yassineaboukir/sublert](https://github.com/yassineaboukir/sublert) | Monitors certificate transparency logs for new subdomains of watched domains. | [subdomain, monitoring, ct, python] | ~2023 | 2020 | 1k+ |
|
||||
| mkchain | — | [trimstray/mkchain](https://github.com/trimstray/mkchain) | Tool to build and verify a valid SSL/TLS certificate chain from PEM files. | [certificate, chain, builder, bash] | ~2022 | 2018 | 500+ |
|
||||
| ssl-cert-check | — | [Matty9191/ssl-cert-check](https://github.com/Matty9191/ssl-cert-check) | Simple Nagios-compatible script to check SSL certificate expiration dates. | [certificate, expiration, monitoring, perl] | ~2020 | 2010 | 300+ |
|
||||
|
||||
[↑ Back to Top](#ssltls--web-security-tools)
|
||||
|
||||
</details>
|
||||
|
||||
<details>
|
||||
|
|
@ -40,6 +70,8 @@ Tools to generate secure cipher suites, DH params, CAA records, and server confi
|
|||
| dhtool | [2ton.com.au/dhtool](https://2ton.com.au/dhtool/) | — | Generates strong Diffie-Hellman parameters to improve forward secrecy. | [dhparam, pfs, tls, generator] | — | 2015 | — |
|
||||
| CAA Record Helper | [sslmate.com/caa](https://sslmate.com/caa/) | — | Generates proper Certificate Authority Authorization (CAA) DNS records. | [caa, dns, generator, certificate] | — | 2017 | — |
|
||||
|
||||
[↑ Back to Top](#ssltls--web-security-tools)
|
||||
|
||||
</details>
|
||||
|
||||
<details>
|
||||
|
|
@ -51,10 +83,12 @@ Search, monitor, and stream CT logs; CA databases.
|
|||
|
||||
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|
||||
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
|
||||
| crt.sh | [crt.sh](https://crt.sh/) | [github.com/crt.sh](https://github.com/crtsh) | Search engine for certificates logged in public Certificate Transparency logs. | [ct, transparency, search, certificate] | — | 2015 | — |
|
||||
| crt.sh | [crt.sh](https://crt.sh/) | — | Search engine for certificates logged in public Certificate Transparency logs. | [ct, transparency, search, certificate] | — | 2015 | — |
|
||||
| CERTSTREAM | [certstream.calidog.io](https://certstream.calidog.io/) | [Calidog/certstream](https://github.com/CaliDog/certstream) | Real-time streaming service for Certificate Transparency log updates. | [ct, transparency, stream, real-time] | 2025-11-20 | 2018 | ~400 |
|
||||
| Common CA Database (CCADB) | [ccadb.my.salesforce-sites.com](https://ccadb.my.salesforce-sites.com/) | — | Repository of Certificate Authority information, roots, and intermediates. | [ca, certificate, database, root] | — | 2017 | — |
|
||||
|
||||
[↑ Back to Top](#ssltls--web-security-tools)
|
||||
|
||||
</details>
|
||||
|
||||
<details>
|
||||
|
|
@ -70,6 +104,8 @@ Intentionally flawed setups, edge-case demos, and client compatibility testers.
|
|||
| tlsfun.de | [tlsfun.de](https://tlsfun.de/) | — | Collection of live demos and tests for various TLS/SSL protocol edge cases. | [tls, demo, testing, protocol] | — | 2016 | — |
|
||||
| Cipher suite compatibility | [ssllabs.com/ssltest/viewMyClient.html](https://www.ssllabs.com/ssltest/viewMyClient.html) | — | Tests TLS cipher and protocol compatibility from your current browser/client. | [tls, compatibility, client, browser] | — | 2011 | — |
|
||||
|
||||
[↑ Back to Top](#ssltls--web-security-tools)
|
||||
|
||||
</details>
|
||||
|
||||
<details>
|
||||
|
|
@ -87,6 +123,8 @@ CSP analyzers, HSTS/CSP monitoring, adoption trackers, and security.txt.
|
|||
| Why No HTTPS? | [whynohttps.com](https://www.whynohttps.com/) | — | Tracks top websites lacking automatic HTTP to HTTPS redirection. | [https, adoption, tracking, list] | — | 2018 | — |
|
||||
| security.txt | [securitytxt.org](https://securitytxt.org/) | — | Standard and generator for security contact/policy disclosure on websites. | [securitytxt, policy, contact, standard] | — | 2017 | — |
|
||||
|
||||
[↑ Back to Top](#ssltls--web-security-tools)
|
||||
|
||||
</details>
|
||||
|
||||
<details>
|
||||
|
|
@ -99,3 +137,7 @@ Cipher databases, TLS cipher search, and other utilities.
|
|||
| Name | Vendor/Webpage | GitHub Repo | Brief Description | Tags | Latest Commit | Creation Date | Stars |
|
||||
|-------------------------------|-----------------------------------------------------|------------------------------------------|-----------------------------------------------------------------------------------|-------------------------------------------|---------------|---------------|-------|
|
||||
| TLS Cipher Suite Search | [ciphersuite.info](https://ciphersuite.info/) | — | Searchable database of TLS cipher suites with security and support details. | [cipher, tls, search, database] | — | 2019 | — |
|
||||
|
||||
[↑ Back to Top](#ssltls--web-security-tools)
|
||||
|
||||
</details>
|
||||
Loading…
Reference in New Issue