Vulnerability Analysis
testssl.sh is a free command-line tool which checks a server's service on any port for support of TLS/SSL ciphers, protocols as well as cryptographic flaws and vulnerabilities.
sudo apt install testssl.sh
testssl.sh <options> <URI>
testssl.sh is a free command-line tool that checks a server's service on any port for support of TLS/SSL ciphers, protocols, and cryptographic flaws. It provides comprehensive testing with detailed output.
The tool tests for over 300 cipher suites, protocol versions, and known vulnerabilities including Heartbleed, POODLE, BEAST, ROBOT, and more. It supports HTML, CSV, JSON, and XML output formats.
testssl.sh is the most comprehensive SSL/TLS scanner available, providing compliance-ready reports and detailed security assessments. It is slower but more thorough than SSLScan.
testssl.sh example.comFull configuration profile - Run a complete diagnostic checking certificates, ciphers, and classic vulnerabilitiestestssl example.comFull SSL testtestssl --vulnerable example.comVulnerability checktestssl -p example.comProtocol check onlytestssl --html example.comHTML reporttestssl example.comFull SSL/TLS testtestssl --sni example.comTest with SNItestssl --ip one 192.168.1.100Test single IPtestssl -p example.comShow ports and protocolstestssl -U example.comCheck for known vulnerabilitiestestssl --jsonfile results.json example.comJSON outputtestssl --csvfile results.csv example.comCSV outputtestssl --htmlfile results.html example.comHTML reporttestssl --xmlfile results.xml example.comXML outputtestssl --severity LOW example.comFilter by severityComprehensive testing of SSL/TLS configurations.
Verify SSL/TLS meets PCI DSS, HIPAA, and other standards.
Detect all known SSL/TLS vulnerabilities.
Test for protocol downgrade attacks.
This tool is designed for authorized security testing, educational purposes, and legitimate network administration only. Unauthorized access to computer systems is illegal.