Tools compared: SSL/TLS scanners

Finding the right tool can be difficult. This sheet compares SSLyze, tlsenum, tls-fingerprinting and tls-prober.

SSLyzetlsenumtls-fingerprintingtls-prober
Description

SSLyze provides a library for scanning services that use SSL/TLS for encrypted communications. It can be used to test their implementation.

The CLI tool tlsenum attempts to enumerate what TLS cipher suites a server supports and then list them in order of priority.

252.1aced53

264.d56de68

Tool details

This tool works by sending out sending out TLS ClientHello messages. Any ServerHello responses from the server are parsed. It assumes that the server is the one which decides the preferred cipher suite, giving an idea on the available ciphers.

Dependencies
StrenghtsThe source code of this software is available
WeaknessesMore than 25 contributors, More than 1000 GitHub stars, The source code of this software is available
Programming language(s)PythonPythonUnknownUnknown
Last release

1.1.4 (2017-09-06)

0.3 (2015-05-25)

UnknownUnknown
Tool page (last updated)

2017-09-17

2017-09-17

2017-06-08

2017-06-08

Tool score
85
60
DownloadDownloadDownloadNo link availableNo link available
More informationSSLyze reviewtlsenum reviewtls-fingerprinting reviewtls-prober review