TLS Prober – A tool for fingerprint SSL/TLS server implementations

https://github.com/WestpointLtd/tls_prober

by richm44 • 11 years ago

30 5 11 years ago

worklogin• 11 years ago

Cool, I'll have to take a look. Qualys SSL labs has a cool set of tools to output not only the supported versions/ciphers, but shows what OS/browser combos would be able to connect to the site.

Good work.

richm442• 11 years ago

The aim of this tool is quite different to that of ssl labs (which is a great tool btw). This is very much focussed on what the server is using (or any SSL accelerators that might be in front of it).

mortenlarsen• 11 years ago

"Supports both pure SSL/TLS protocols like HTTPS and those that use STARTTLS such as SMTP and POP3."

There exists other reasons than HTTPS to use TLS.

danimo• 11 years ago

Note that rich does not claim anything else. However, there is a fundamental difference between "initiate TLS connection from byte 0" (as used in HTTPS, but also IMAPS or SMTPS) and STARTTLS, where the protocol is plain text until the client issues the STARTTLS command, make makes protocols that were designed to TLS-enable plain text only protocols such as IMAP and SMTP (without the 'S'), while keeping the port number.

That was the point of this note. And of course there are even more use cases for TLS.

TLS Prober – A tool for fingerprint SSL/TLS server implementations

Related Stories