SSLScan Section 8 of 10

Pro Tips

Tip

Use --no-failed to hide rejected ciphers and focus on what the server actually accepts.

Info

SSLScan works on any TCP service with TLS — not just HTTPS. Use --starttls-smtp for mail servers.

Tip

Export results to XML with --xml=results.xml for automated parsing and reporting.

Warning

A server supporting TLS 1.0 or 1.1 is a finding in most compliance frameworks (PCI-DSS, HIPAA, SOC2).
Next: Quiz Back