sslscan Download – Detect SSL Versions & Cipher Suites (Including TLS)

Command:

[Options] [host:port | host]

 

Options:

—targets=file>       A file containing a list of hosts to check.

       Hosts can  be supplied  with ports (host:port)

—sni–name=name>      Hostname for SNI

—ipv4                 Only use IPv4

—ipv6                 Only use IPv6

—show–certificate     Show full certificate information

—no–check–certificate    Don‘t warn about weak certificate algorithm or keys

—show–client–cas      Show trusted CAs for TLS client auth

—show–ciphers         Show supported client ciphers

—show–cipher–ids      Show cipher ids

—show–times           Show handhake times in milliseconds

—ssl2                 Only check SSLv2 ciphers

—ssl3                 Only check SSLv3 ciphers

—tls10                Only check TLSv1.0 ciphers

—tls11                Only check TLSv1.1 ciphers

—tls12                Only check TLSv1.2 ciphers

—tlsall               Only check TLS ciphers (all versions)

—ocsp                 Request OCSP response from server

—pk=file>            A file containing the private key or a PKCS#12 file

                       containing a private key/certificate pair

—pkpass=password>    The password for the private  key or PKCS#12 file

—certs=file>         A file containing PEM/ASN1 formatted client certificates

—no–ciphersuites      Do not check for supported ciphersuites

—no–fallback          Do not check for TLS Fallback SCSV

—no–renegotiation     Do not check for TLS renegotiation

—no–compression       Do not check for TLS compression (CRIME)

—no–heartbleed        Do not check for OpenSSL Heartbleed (CVE–2014–0160)

—starttls–ftp         STARTTLS setup for FTP

—starttls–imap        STARTTLS setup for IMAP

—starttls–irc         STARTTLS setup for IRC

—starttls–ldap        STARTTLS setup for LDAP

—starttls–pop3        STARTTLS setup for POP3

—starttls–smtp        STARTTLS setup for SMTP

—starttls–xmpp        STARTTLS setup for XMPP

—starttls–psql        STARTTLS setup for PostgreSQL

—xmpp–server          Use a server–to–server XMPP handshake

—http                 Test a HTTP connection

—rdp                  Send RDP preamble before starting scan

—bugs                 Enable SSL implementation bug work–arounds

—timeout=sec>        Set socket timeout. Default is 3s

—sleep=msec>         Pause between connection request. Default is disabled

—xml=file>           Output results to an XML file

                       file> can be –, which means stdout

—version              Display the program version

—verbose              Display verbose output

—no–cipher–details    Disable EC curve names and EDH/RSA key lengths output

—no–colour            Disable coloured output

—help                 Display the  help text  you are  now reading