testssl.sh
Thorough TLS/SSL testing shell script.
KaliParrotLinuxlow
pkg: testssl.sh
testssl.sh checks a server’s TLS for protocols, ciphers, key exchange and known vulnerabilities (Heartbleed, ROBOT, etc.) with clear output.
Syntax
testssl.sh {host}[:port]
Example
testssl.sh https://example.com
Performs a comprehensive TLS assessment and flags vulnerabilities and weak settings.
Options & flags
What each switch does. Toggle them in the builder below to assemble a command.
Command builder
Tick options (and fill any values) to build a ready-to-copy command.
testssl.sh
Usage examples
testssl.sh https://target.tld
Comprehensive TLS assessment.
testssl.sh -U target.tld
Run all vulnerability checks.
Advantages
- Very thorough, human-readable
- Single portable script
- Named-vulnerability checks
Disadvantages
- Slower (many handshakes)
- Noisy against IDS
- Output is long
Tags
#tls#ssl
Official docs: testssl.sh ↗
Related commands
Frequently asked questions
What is testssl.sh used for?
testssl.sh checks a server’s TLS for protocols, ciphers, key exchange and known vulnerabilities (Heartbleed, ROBOT, etc.) with clear output.
What is an example testssl.sh command?
A common example is: testssl.sh https://example.com — Performs a comprehensive TLS assessment and flags vulnerabilities and weak settings.
Is testssl.sh part of Kali Linux?
Yes. testssl.sh ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install testssl.sh.
What category of security tool is testssl.sh?
testssl.sh is a Vulnerability Analysis tool with a low-risk profile when run against a live target.
Try recon tools live
Run real scans against a domain you control, stage by stage.