UI and Command Line Reference Cases for DeepViolet API
Switch branches/tags
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.settings
build
icon
src/main
stylesheets
.classpath
.gitignore
.project
.travis.yml
LICENSE
README.md
dvAPI-jar-assembly.xml
pom.xml
settings.xml

README.md

Build Status Black Hat Arsenal Black Hat Arsenal

OWASP DeepVioletTools

OWASP Project Page | WIKI | DV API JavaDocs

DeepViolet(DV) is a TLS/SSL scanning API written in Java. To keep DV easy to use, identify bugs, reference implementations have been developed in this project that consume the DV API. If you want to see what DV can do, use it from the command line in your scripts or use the graphical tool from the comfort of your desktop. Both tools can be used to scan HTTPS web servers to check server certificate trust chains, revocation status, check certificates for pending expiration, weak signing algorithms and much more. Original blog article post describing this project, http://www.securitycurmudgeon.com/2014/07/ssltls-introspection.html

Screenshots

Run DV from the UI from the desktop.

java -jar dvUI.jar

deepviolet-git

Run DV from the shell on the command line.

java -jar dvCMD.jar -serverurl https://www.github.com/ -s thrcisn

dvcmd-snapshot

Acknowledgements

This tool impliments ideas, code, and takes inspriation from other projects and leaders like: Qualys SSL Labs and Ivan Ristić, OpenSSL, and Oracle's Java Security Team. Many thanks negotiating TLS/SSL handshakes and ciphersuite handling adapted from code examples by Thomas Pornin.

Looking for more information? See the project wiki or the API wiki

This project leverages the works of other open source community projects and is provided for educational purposes. Use at your own risk. See LICENSE for further information.