zoukankan      html  css  js  c++  java
  • 弱安全协议探测工具-sslciphercheck

    SSL(Secure Sockets Layer 安全套接层),及其继任者传输层安全(Transport Layer Security,TLS)是为

    网络通信提供安全及数据完整性的一种安全协议。TLS与SSL在传输层对网络连接进行加密,而老旧的加密协议

    可能会带来安全隐患,在freebuf上看到有人介绍过一款工具(sslciphercheck v1.4.2),拿来试试效果还不错。

    sslciphercheck v1.4.2特性:

        Features
        --------
        - Console
        - Supports SSLv2
        - Supports SSLv3
        - Supports TLSv1
        - Checks all SSL ciphers supported by OpenSSL
        - Retrieves the SSL certificate info including SGC
        - Performs a HTTP request to ensure that the protocol/algorithm connection is
          valid
        - Parses out the HTTP response header and displays to console e.g. HTTP/1.1 
          200 OK or HTTP/1.1 301 Moved Permanently etc
        - Can output each successful HTTP response to a file in the format:
        
          PROTOCOL_ALGORITHM_STRENGTH.html e.g. SSLv3_AES256-SHA_256.html (-t)
          
        - Can perform a keyword(s) match on the HTML response (-m)
        - Alerts for certificate issues such as expired, invalid cert chain, incorrect
          subject name etc
        - Colourised output to alert if weak ciphers are in use or SSLv2 supported
        - Colourised output to alert on certificate issues
        - Checks for SSL renegotiation issues

    使用实例:

  • 相关阅读:
    PathInfo模式,thinkPHP模板与控制之间的关系
    thinkPHP无法显示验证码问题
    jQuery.validate 中文API手册
    MySQL 常用函数
    MySQL插入、更新与删除数据 习题
    MySQL查询语句练习题
    在windows下SphinxCoreseek的配置安装与测试
    Ubuntu上Coreseek+PHP的安装
    Ubuntu下安装CoreSeek
    Ubuntu更新命令
  • 原文地址:https://www.cnblogs.com/tdcqma/p/5504676.html
Copyright © 2011-2022 走看看