IDontSpeakSSL is a simple script based on sslyze SSL/TLS scanner. It is designed to automate the discovery of bad practices for SSL/TLS configurations, cipher suites, and certificates. It is useful on a large scope, for example during internal penetration testing or external testing on a large scope.

pip3 install --user git+ssh://git@github.com/BishopFox/IDontSpeakSSL.git

or

git clone git@github.com:BishopFox/IDontSpeakSSL.git && pip3 install --user IDontSpeakSSL/

This script accepts the following options:

• -t Path to a specific testssl.sh script (optional)
• -f Path to a file containing the list of IP addresses or domain names to scan
• -n Path to an XML nmap scan file.
• -i List of IP addresses or domain names to scan
• -d Path to the directory where all results of the scans and analyses will be saved
• -w Number of workers to perform the scans (By default defined to 8)

To run properly, either -i or -f (or both) is required. Here are some examples of how to use IDontSpeakSSL:

python3 IDontSpeakSSL.py -f scope.txt
python3 IDontSpeakSSL.py -n nmap_scan_result.xml
python3 IDontSpeakSSL.py -i www.google.com,www.facebook.com,10.0.0.1
python3 IDontSpeakSSL.py -f scope.txt -i www.facebook.com,10.0.0.1
python3 IDontSpeakSSL.py -f scope.txt -d result/directory
python3 IDontSpeakSSL.py -f scope.txt -d result/directory -w 16
python3 IDontSpeakSSL.py -t /path/to/testssl/script/testssl.sh -l scope.txt -d result/directory

As a parameter, IDontSpeakSSL requires sending a flat file containing a list of services to scan. This list must be set according to the following syntax:

10.0.0.1
10.0.0.2
10.0.0.3:8443
www.example.com
www.example.com:8000

If a port other than 443 should be scanned, the port number must be added after the IP address or the domain name, separated with a colon. No URL should be set with a scheme. For example, https://www.example.com will produce an error.

Here is an example of a report made by IDontSpeakSSL:

trivette - Florian Nivette fnivette@bishopfox.com