Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use nmap to test for weak ssl ciphers #81

Open
omerlh opened this issue Aug 22, 2017 · 4 comments
Open

Use nmap to test for weak ssl ciphers #81

omerlh opened this issue Aug 22, 2017 · 4 comments

Comments

@omerlh
Copy link
Collaborator

omerlh commented Aug 22, 2017

Hey
NMap can be used to test for weak ssl ciphers using:
nmap --script ssl-cert,ssl-enum-ciphers -p 443 -oX output.xml host
It will be nice to run it from glue and process the XML so Glue will be able to report on weak ciphers (nmap rank them, so we can report on each cipher below A grade, and have the minimum grade configurable).
I've created a little script that does exactly that - you can find the code here. It is in Ruby, so it will be very easy to move the code into Glue.

@stale
Copy link

stale bot commented May 1, 2018

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@omerlh
Copy link
Collaborator Author

omerlh commented May 1, 2018

Closing for now, will re-open when relevant.

@omerlh omerlh closed this as completed May 1, 2018
@stale stale bot added the stale label May 1, 2018
@omerlh omerlh reopened this May 9, 2018
@stale stale bot removed the stale label May 9, 2018
@omerlh
Copy link
Collaborator Author

omerlh commented May 9, 2018

should be a plugin IMO, see #107.

@stale
Copy link

stale bot commented Jul 8, 2018

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

@stale stale bot added the stale label Jul 8, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant