sslscan Commands Reference

Lightweight cipher and protocol enumerator (sslscan2 supports legacy through TLS 1.3). Faster feedback than a full testssl.sh run.

📦 Installation

brew install sslscan
# Debian/Ubuntu: sudo apt install sslscan

🚀 Basic scans

sslscan example.com
sslscan example.com:443
sslscan --show-certificate example.com
sslscan --show-certificates example.com

🔐 Protocol filters

sslscan --tls13 example.com
sslscan --tls12 example.com
sslscan --tlsall example.com
sslscan --ssl3 example.com

🛠️ Common options

sslscan --sni-name=www.example.com 203.0.113.10
sslscan --ocsp example.com
sslscan --xml=out.xml example.com
sslscan --no-heartbleed --no-compression example.com
sslscan --starttls-smtp mail.example.com:25

🔗 See Also

Docs: github.com/rbsec/sslscan