/SSLVerifier

A tool to check enabled/disabled TLS/SSL versions

Primary LanguageShell

SSLVerifier

A tool to check TLS/SSL version. Powered by sslscan.

Install

  • wget https://raw.githubusercontent.com/BrunoThums/SSLVerifier/main/setup.sh; chmod +x setup.sh; sudo ./setup.sh

How to use

  • You can pass a URL or a file with URLs without any treatment:
    • No need to pass http:// or https://
    • No need to pass www (coming soon)
    • No port required
    • Don't worry about duplicates
    • Don't worry about directories
  • sslverifier file_with_urls.txt
  • sslverifier single_URL

What it can do?

  • (Obviously) check TLS/SSL certificates of a single URL or a file of URLs
  • Convert URL from http to https (required for sslscan)
  • Add https:// to every URL (if there's none)
  • Add port 80 and 443 to URL that doesn't contain a port especified
  • Get rid off duplicates in file
  • Show, at the end, which URL's have:
    • TLSv1.0 and/or TLSv1.1 enabled
    • TLSv1.2 AND TLSv1.3 disabled
  • Check if all protocols are disable (is it even accessible?)

Useful links:

  • ANSI escape code - Colors
  • ASCII Generator
  • How to print an ASCII image? Save in a txt, type cat image.txt | gzip | base64 in terminal, copy and paste into script base64 -d <<<"yourBase64image" | gunzip (that's it, only ctrl+v, don't add new lines or remove new lines, leaves as it is)

TO-DO

  • Remove www from URLs
  • Optionally put, by argument, the addition of port 80 and 443 at the end of the URL
  • Add custom message for host invalid or error
  • Check, by argument, for valid/invalid certificates

Uninstall

  • sudo rm /usr/bin/sslverifier