{"id":348,"date":"2017-06-23T22:43:16","date_gmt":"2017-06-23T21:43:16","guid":{"rendered":"https:\/\/www.attackdebris.com\/?p=348"},"modified":"2017-06-25T12:28:53","modified_gmt":"2017-06-25T11:28:53","slug":"auto-sslscan","status":"publish","type":"post","link":"https:\/\/www.attackdebris.com\/?p=348","title":{"rendered":"Auto-sslscan (Automatic SSL Scanning)"},"content":{"rendered":"

Auto-sslscan<\/strong><\/p>\n

As I mentioned in the previous post<\/a> whilst Nessus and Nmap do a reasonable job of enumerating SSL protocols and ciphers I often find myself utilising other 3rd party SSL scanning tools. One I find myself turning to on a regular basis is sslscan<\/a>, I like the output it provides and issues become immediately apparent, although if you prefer using SSL scanning tool X or Y, the auto-sslscan code can be easily amended to cater for your tool of choice.<\/p>\n

Auto-sslscan is a python script designed to automate the process of conducting ssl scanning via sslcan. The Auto-sslscan script parses an nmap.xml output file, extracts all SSL services and automatically performs an sslscan of them.<\/p>\n

Step 1 \u2013 Create a valid nmap .xml fil<\/strong>e:<\/p>\n

Note: Some form of Nmap version scanning must be utilised to create the XML ouput i.e. -sV<\/code> or -A<\/code> (In order to determine whether the service is SSL enabled)<\/p>\n

\"\"<\/a><\/p>\n

Step 2 – Process the Nmap XML file with auto-sslscan.py:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

SSL Services:<\/strong><\/p>\n

That’s effectively job done, we now have a list of SSL services if we wish to target them again with another tool:<\/p>\n

\"\"<\/a><\/p>\n

SSL Scan Ouput:<\/strong><\/p>\n

The actual SSL scanning “sslscan” ouput is saved to a concatenated file (truncated image below):<\/p>\n

\"\"<\/a><\/p>\n

The code and installation instructions can be found here: https:\/\/github.com\/attackdebris\/auto-sslscan<\/a><\/p>\n

Also check out nmap-ssl-parser, which simply parses the nmap XML file and provides a list of SSL services: https:\/\/github.com\/attackdebris\/nmap-ssl-parser<\/a><\/p>\n

Credit\u00a0 \u2013 The base code I used to create nmap-ssl-parser: https:\/\/github.com\/DanMcInerney\/nmap-parser\/blob\/master\/nmap-parser.py<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Auto-sslscan As I mentioned in the previous post whilst Nessus and Nmap do a reasonable job of enumerating SSL protocols and ciphers I often find myself utilising other 3rd party SSL scanning tools. One I find myself turning to on a regular basis is sslscan, I like the output it provides and issues become immediately … <\/p>\n

Continue reading<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[1],"tags":[12],"class_list":["post-348","post","type-post","status-publish","format-standard","hentry","category-tools","tag-tools","item-wrap"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p3MDvd-5C","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=\/wp\/v2\/posts\/348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=348"}],"version-history":[{"count":6,"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=\/wp\/v2\/posts\/348\/revisions"}],"predecessor-version":[{"id":363,"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=\/wp\/v2\/posts\/348\/revisions\/363"}],"wp:attachment":[{"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.attackdebris.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}