None of my existing tools gave the option of using web proxy to retrieve the SSL cipher strengths supported by a web server. With a bit of googling I came across SSLyze v0.4 which has recently added support for this.
http://code.google.com/p/sslyze/
It allows HTTP Web Proxies via the --http_tunnel command and has support fot TLS 1.1 and 1.2 -good stuff.
It's currently in BackTrack but only v0.3 in /pentest/web/sslyze/.
No comments:
Post a Comment