rbsec/sslscan

Health v2 · maintenance only

Adoption not part of the score

2618 stars · 415 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

sslscan is a command-line tool that tests SSL/TLS enabled services to discover supported cipher suites, protocols, key exchange groups, and signature algorithms. Version 2 is a rewrite that supports legacy protocols (SSLv2/SSLv3) and TLSv1.3 independently of the compiled OpenSSL version.

Use cases

• scan a server for supported TLS cipher suites
• check if a service still supports weak SSLv2 or SSLv3 protocols
• audit TLS configuration for weak ciphers like RC4, 3DES, or CBC
• enumerate key exchange groups and signature algorithms on a TLS endpoint
• verify TLSv1.3 support on a server
• generate XML output of TLS scan results for reporting

When to choose

• you need a fast, focused CLI scanner for SSL/TLS configuration auditing
• you need to detect legacy protocol support (SSLv2/SSLv3) regardless of your local OpenSSL version
• you want machine-readable XML output for automated security reporting

When to avoid

• you need a full vulnerability scanner rather than a TLS-specific tool
• you need GUI-based or continuous certificate monitoring
• you need to test non-TLS services

Facets

cli-tool · maturity active

security vulnerability-scanning cli developer-tools security penetration-testing networking developer-tools windows cli cross-platform ssl tls cipher-scanning penetration-testing network-security openssl command-line linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="rbsec/sslscan")