sslscan

No entries match these filters. Clear filters

1. docs update Sep 25, 2026 · issue 085

   sslscan adds --all-groups to enumerate key exchange groups across all supported TLS versions.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ TRY IT
   Audit a server that enforces different key exchange group policies per TLS version, ensuring no version is missed.
   copy

   $ sslscan --all-groups <target>

2. 2.2.3 Sep 17, 2026 · issue 078

   sslscan 2.2.3 adds --all-groups to enumerate key exchange groups across all supported TLS protocols.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.2.3 https://github.com/rbsec/sslscan.git
   # already have the repo? check out this version:
   $ git checkout 2.2.3

   └──▷ TRY IT
   Enumerate supported key exchange groups across all TLS protocol versions on a target to catch group misconfigurations not visible in a single handshake.
   copy

   $ sslscan --all-groups <target>:443

3. 2.2.1 Nov 30, 2025 · release notes

   Adds strength XML field, PQ hybrid key exchange groups, and PQ group display in cipher lists

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.2.1 https://github.com/rbsec/sslscan.git
   # already have the repo? check out this version:
   $ git checkout 2.2.1

4. 2.2.0 Jun 15, 2025 · release notes

   sslscan 2.2.0 adds post-quantum key exchangepost-quantum key exchangeA cryptographic handshake algorithm designed to resist attacks from quantum computers, using math problems like lattices that quantum algorithms cannot efficiently solve, letting tools stay secure against future quantum-capable adversaries. detection and updated cipher/algorithm colouring.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.2.0 https://github.com/rbsec/sslscan.git
   # already have the repo? check out this version:
   $ git checkout 2.2.0

   • Supports scanning post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key exchange groups such as X25519MLKEM768.
   • Updated colouring of ciphers and algorithms for clearer visual grading of scan results.

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !Building sslscan now requires a minimum OpenSSL version of 3.5.0 (LTS); distros shipping older OpenSSL versions must use static builds or upgrade.
5. 2.1.3 Jan 21, 2024 · release notes

   Adds -quiet flag to sslscan 2.1.3 for quiet shutdown during scanning.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.1.3 https://github.com/rbsec/sslscan.git
   # already have the repo? check out this version:
   $ git checkout 2.1.3

   └──▷ USE IT
   Run a silent scan to suppress all output except errors, useful for scripting or background tasks.
   shell copy

   sslscan --quiet <target_host>

   • Enable --quiet flag in sslscan 2.1.3 CLI for quiet shutdown of the scan process.

   1 detail in Everything

6. 2.0.11 Dec 20, 2021 · release notes

   sslscan 2.0.11 adds --iana-names for IANA cipher names and improves sig algo detection

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.11 https://github.com/rbsec/sslscan.git
   # already have the repo? check out this version:
   $ git checkout 2.0.11

   └──▷ USE IT
   Scan a host and output cipher suites using standardized IANA naming for easier reference against other documentation.
   shell copy

   sslscan --iana-names example.com

   • Adds --iana-names flag to display IANA/RFC cipher names instead of OpenSSL-style names

   1 detail in Everything

7. 2.0.0 Jul 22, 2020 · release notes

   sslscan 2.0 rewrites backend to support legacy SSLv2/SSLv3 and TLSv1.3 independent of host OpenSSL version

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.0 https://github.com/rbsec/sslscan.git
   # already have the repo? check out this version:
   $ git checkout 2.0.0

   • Adds support for SSLv2 and SSLv3 protocol checks via internal implementation
   • Adds support for TLSv1.3 protocol checks via internal implementation

   2 details in Everything

   └──▷ BREAKING ON UPGRADE

   • !XML output format changes; consult the README for specific field and structure modifications
8. 2.0.0-beta1 Prerelease Mar 21, 2020 · release notes

   sslscan v2.0.0-beta1 adds printed curve name and key strength for ECC certificates

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.0-beta1 https://github.com/rbsec/sslscan.git
   # already have the repo? check out this version:
   $ git checkout 2.0.0-beta1

   • Prints ECC certificate curve names and associated key strengths in output

   1 detail in Everything

9. 2.0.0-alpha1 Prerelease Feb 23, 2020 · release notes

   sslscan 2.0.0-alpha1 adds TLSv1.3 detection, SSLv2/3 support independent of OpenSSL, and new checks for key exchange groups and signature algorithms.

   └──▷ GET THIS VERSION

   copy

   $ git clone --branch 2.0.0-alpha1 https://github.com/rbsec/sslscan.git
   # already have the repo? check out this version:
   $ git checkout 2.0.0-alpha1

   • Adds TLSv1.3 protocol detection
   • Adds SSLv2 and SSLv3 protocol detection regardless of OpenSSL
   • Adds checks for server key exchange groups
   • Adds checks for server signature algorithms

   4 details in Everything

10. 1.11.11 Dec 31, 2017 · release notes

    Adds -4 and -6 flags to force IPv4 or IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. connections in sslscan.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.11.11 https://github.com/rbsec/sslscan.git
    # already have the repo? check out this version:
    $ git checkout 1.11.11

    └──▷ TRY IT
    Force sslscan to connect over IPv6 only, useful for testing dual-stack servers or bypassing IPv4 routing issues.
    copy

    $ sslscan -6 target.com

11. 1.11.0 Sep 24, 2015 · release notes

    sslscan v1.11.0 rewrites ciphersuite engine for speed and adds protocol priority ordering with new output flagging.

    └──▷ GET THIS VERSION

    copy

    $ git clone --branch 1.11.0 https://github.com/rbsec/sslscan.git
    # already have the repo? check out this version:
    $ git checkout 1.11.0

    • Rewrites the ciphersuite scanning engine to be much faster
    • Scans most secure protocols first (TLSv1.2 -> SSLv2)
    • Outputs ciphers in order of server preference
    • Flags TLSv1.0 ciphers in output
    • Flags 56 bit ciphers as red

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed --failed option (obsolete)
    • !Removed --no-preferred-ciphers option (obsolete)