How to use sslyze? | SSL/TLS Scanning Tool

SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive and should help organizations and testers identify misconfigurations affecting their SSL servers.

SSLyze can analyze the SSL/TLS configuration of a server by connecting to it, in order to ensure that it uses strong encryption settings (certificate, cipher suites, elliptic curves, etc.), and that it is not vulnerable to known TLS attacks (Heartbleed, ROBOT, OpenSSL CCS injection, etc.).

The script is ran using python, which should be installed before running the command. Using sslyze is pretty straight forward. To run the command, first you must run the command against the mozilla domain to establish the baseline. Use the following command:

python -m sslyze

Similar Posts