Skip to main content

Get full access to Kali Linux Intrusion and Exploitation Cookbook and 60K+ other titles, with a free 10-day trial of O'Reilly.

There are also live events, courses curated by job role, and more.

Start your free trial

Finding SSL cipher vulnerabilities

In this recipe, we will learn to use tools to scan for vulnerable SSL ciphers and SSL-related vulnerabilities.

Getting ready

For this recipe, you will require an Internet connection.

How to do it...

Open the terminal and launch the SSLScan tool, as shown in the following screenshot:
To scan your target using SSLScan, run the following command:
```
sslscan demo.testfire.net
```
SSLScan will test the SSL certificate for the all the ciphers it supports. Weak ciphers will be shown in red and yellow. Strong ciphers will be shown in green:
```
root@Intrusion-Exploitation:~# sslscan demo.testfire.net
Version: -static
OpenSSL 1.0.1m-dev ...
```

Get Kali Linux Intrusion and Exploitation Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial

Don’t leave empty-handed

Get Mark Richards’s Software Architecture Patterns ebook to better understand how to design components—and how they should interact.

It’s yours, free.

Get it now

Cover of Software Architecture Patterns

Check it out now on O’Reilly

Dive in for free with a 10-day trial of the O’Reilly learning platform—then explore all the other resources our members count on to build skills and solve problems every day.

Start your free trial Become a member now