_ ReconLab
Commands  / Vulnerability Analysis  / sslscan

sslscan

Quickly enumerate SSL/TLS ciphers and protocols.

KaliParrotLinuxlow

pkg: sslscan

sslscan connects to an SSL/TLS service and lists supported protocols, ciphers and certificate details.

Syntax

sslscan {host}[:port]

Example

sslscan example.com

Lists supported protocols/ciphers and flags weak ones for the host on 443.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

--no-failedOnly show accepted ciphers.
--show-certificatePrint the certificate details.
--targets <hosts.txt>File of host:port targets.
--ssl2Also test legacy SSLv2/3.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

sslscan

Usage examples

sslscan target.tld

List supported protocols and ciphers.

sslscan --no-failed target.tld

Show only accepted ciphers.

Advantages
  • Fast TLS posture overview
  • Highlights weak protocols/ciphers
  • Simple single-command use
Disadvantages
  • Less exhaustive than testssl.sh
  • No CVE-specific checks
  • Output needs interpretation
Tags
#tls#ssl#crypto

Official docs: sslscan ↗

Related commands

SSLyze

Fast, programmatic TLS configuration analyzer.

testssl.sh

Thorough TLS/SSL testing shell script.

Frequently asked questions

What is sslscan used for?
sslscan connects to an SSL/TLS service and lists supported protocols, ciphers and certificate details.
What is an example sslscan command?
A common example is: sslscan example.com — Lists supported protocols/ciphers and flags weak ones for the host on 443.
Is sslscan part of Kali Linux?
Yes. sslscan ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install sslscan.
What category of security tool is sslscan?
sslscan is a Vulnerability Analysis tool with a low-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →