Hurricane Labs - Open Source - sslsweep

Overview

sslsweep tests TCP services for the presence of SSL and reports things about the services found, such as:

sslsweep can be used for security testing as well as ongoing monitoring of services. It can produce output in human readable text, HTML and CSV. It can also run as a Nagios plugin. Example outputs: HTML, CSV, human-readable text.

sslsweep can accept input on the command line, on standard input (one host:port pair per line), and it can also accept Nmap scan output (in the greppable format) as input and it will test all open TCP ports found by the Nmap scan.

Dependencies

Author and License

sslsweep is © 2009 Hurricane Labs, LLC, and was written by Steve Benson.

sslsweep is licensed under the terms of the GNU GPL version 2 or any later version. See the LICENSE file.

No Warranty

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details

Download

Installation

From within the extracted source package directory:

$ python setup.py build
# python setup.py install

Usage

For full information, see the man page.

Usage Examples:

 % sslsweep ebay.com:https www.amazon.com:https
 ebay.com            https      PASS    spages.half.ebay.com May  9 23:59:59 2010 GMT
 www.amazon.com      https      PASS    www.amazon.com       Aug 27 23:59:59 2009 GMT

 % cat > input
 ebay.com:https
 www.amazon.com:443
 ^D
 % sslsweep < input
 ebay.com            https      PASS    spages.half.ebay.com May  9 23:59:59 2010 GMT
 www.amazon.com      443        PASS    www.amazon.com       Aug 27 23:59:59 2009 GMT

 % sslsweep -f csv < input
 ebay.com,https,pass,spages.half.ebay.com,May  9 23:59:59 2010 GMT
 www.amazon.com,https,pass,www.amazon.com,Aug 27 23:59:59 2009 GMT

 % sslsweep -f nagios google.com:https
 OK