noraj / tls-map

CLI & library for TLS cipher suites manipulation

TLS map

CLI & library for mapping TLS cipher algorithm names: IANA, OpenSSL, GnuTLS, NSS; get information and vulnerabilities about cipher suites; extract cipher suites from external tools: SSLyze, sslscan2, testssl.sh, ssllabs-scan, tlsx

CLI

Library

Features

• CLI and library
• Search feature: hexadecimal codepoint and major TLS libraries cipher algorithm name: IANA, OpenSSL, GnuTLS, NSS
  • get extra info about a cipher
• Export to files: markdown table, expanded JSON, minified JSON, Ruby marshalized hash
• Extract ciphers from external tools file output (SSLyze, sslscan2, testssl.sh, ssllabs-scan, tlsx)
• Bulk search (file with one cipher per line)

Installation

$ gem install tls-map

Check the installation page on the documentation to discover more methods.

Documentation

Homepage / Documentation: https://noraj.github.io/tls-map/

Author

Made by Alexandre ZANNI (@noraj). Forked from sec-it/tls-map.

tls-map's Issues

audit command

bulk security verification (a mix of bulk + extended option (API) to check if the algs are vuln) + only and hide weak options

cf.

• docs/pages/examples.md
• lib/tls_map/app/cipher/cipher.rb

Display protocol version for extract command when options are used

Also display protocol version for the extract command when --hide-weak or --only-weak are used.

tlsx support

https://github.com/projectdiscovery/tlsx

Currently not working cf. projectdiscovery/tlsx#164 fixed in https://github.com/projectdiscovery/tlsx/releases/tag/v1.0.5

Extract feature for testssl 3.1.x+ is broken

Extract feature for testssl 3.1.x+ is broken due to a backward incompatible change in the JSON output. see drwetter/testssl.sh#1994