security enabled verified low v1.0.0

sslscan

Fast C-based TLS/SSL scanner that checks protocol support, cipher suites, certificate information, and performs comprehensive server configuration analysis.

📋 Live Preview

sslscan {flag-xml} {flag-xmlfile} {flag-no-colour} {flag-no-heartbleed} {flag-ssl2} {flag-ssl3} {flag-tls10} {flag-tls11} {flag-tls12} {flag-tls13} {flag-starttls} {flag-sni} {target}

📎 flag-xml 📎 flag-xmlfile 📎 flag-no-colour 📎 flag-no-heartbleed 📎 flag-ssl2 📎 flag-ssl3 📎 flag-tls10 📎 flag-tls11 📎 flag-tls12 📎 flag-tls13 📎 flag-starttls 📎 flag-sni 📎 target

sslscan {flag-xml} {flag-xmlfile} {flag-no-colour} {flag-no-heartbleed} {flag-ssl2} {flag-ssl3} {flag-tls10} {flag-tls11} {flag-tls12} {flag-tls13} {flag-starttls} {flag-sni} {target}

Sandbox: execFile · Timeout: 120s

Capabilities

tls.scan.certificate

tls.scan.cipher

tls.scan.protocol

Parameters

Name	Type	Required	Default	Description	Aliases
`target`	string	Yes	-	Target hostname:port	-
`flag-xml`	boolean	No	-	Output in XML format	`--xml`
`flag-xmlfile`	string	No	-	Output XML to file	`--xml-file`
`flag-no-colour`	boolean	No	-	Disable colored output	`--no-colour`
`flag-no-heartbleed`	boolean	No	-	Skip Heartbleed check	`--no-heartbleed`
`flag-ssl2`	boolean	No	-	Only check SSLv2	`--ssl2`
`flag-ssl3`	boolean	No	-	Only check SSLv3	`--ssl3`
`flag-tls10`	boolean	No	-	Only check TLSv1.0	`--tls10`
`flag-tls11`	boolean	No	-	Only check TLSv1.1	`--tls11`
`flag-tls12`	boolean	No	-	Only check TLSv1.2	`--tls12`
`flag-tls13`	boolean	No	-	Only check TLSv1.3	`--tls13`
`flag-starttls`	string	No	-	STARTTLS protocol (smtp, imap, pop3, etc.)	`--starttls`
`flag-sni`	string	No	-	Server Name Indication hostname	`--sni`

Artifacts

Type	Description	MIME	Schema	Trust
`report.txt`	TLS scan results as text	text/plain	-	verified
`report.xml`	TLS scan results as XML	text/xml	-	verified

Contract

Inputs

network.target.host

Target hostname or IP

network.port

Target port (default 443)

Outputs

report.txt

Scan results in text

report.xml

Scan results in XML

Side effects: network_traffic

Workflow Edges

Produces

report.txtreport.xml

Consumes

network.target.hostnetwork.port

Resource Profile

Resource	Value
CPU	low
Memory	32 MB
Network	low
Disk I/O	low

Examples

Basic TLS scan

sslscan example.com:443

XML output to file

sslscan --xml-file scan.xml example.com:443

Check STARTTLS IMAP

sslscan --starttls imap mail.example.com:143

Documentation

sslscan — TLS/SSL Scanner

sslscan is a fast, lightweight C-based TLS/SSL scanner that tests services for supported cipher suites, protocol versions, certificate information, and known vulnerabilities. It is commonly included in Kali Linux and other pentesting distributions.

Usage

# Basic scan
sslscan example.com:443

# XML output
sslscan --xml-file scan.xml example.com:443

# Scan with SNI
sslscan --sni example.com 192.168.1.100:443

# Check STARTTLS
sslscan --starttls smtp mail.example.com:25

Related Tools

testssl.shsslyzeopensslnmap

References

sslscan GitHub