Hunting for SSL flaws

Most web applications today use SSL to communicate with the server. SSLscan is a great tool to check SSL for flaws or misconfigurations.

In this recipe, we will learn how to use SSLScan to perform an analysis of SSL configured on the website.

How to do it...

Let's perform the following steps:

1. We will look at the help manual to see the various options the tool has:

sslscan -h

The following screenshot shows the output of the preceding command:

2. To run the tool against a host, we type the following:

sslscan host.com:port

The following screenshot shows the output of the preceding command and we can see various types of information on the SSL protocol implemented on google.com:

As we can see from...