This message was deleted.
# _generals
Slackbot
12/09/2022, 3:18 PMThis message was deleted.
b
Balint Oberrauch
12/09/2022, 3:19 PMIIScrypto --> https://www.nartac.com/Products/IISCrypto/
r
Ray Davis
12/09/2022, 3:19 PMThank you, I have that, I did not explain well. Looking for a scanner to help me analyze things
d
Deyda
12/09/2022, 3:20 PMr
Ray Davis
12/09/2022, 3:21 PMThanks @Deyda I have that too. I looking to scan my lab (internal domain) none internet facing.
d
Deyda
12/09/2022, 3:21 PMah ok sry
r
Ray Davis
12/09/2022, 3:21 PMno worries, I did not explain it well.
Ray Davis
12/09/2022, 3:25 PMmaybe security onion
b
Balint Oberrauch
12/09/2022, 3:26 PMI've found a repository from SSLLabs. https://github.com/ssllabs/research/wiki/Assessment-Tools. TestSSLServer seems promising. https://github.com/pornin/TestSSLServer/
r
Ray Davis
12/09/2022, 3:26 PMThank you, I will check that out. Looks nice
r
Ryan Gallier
12/09/2022, 4:17 PMyou can also use openssl for this.
Ryan Gallier
12/09/2022, 4:18 PMopenssl s_client -showcerts -connect site.domain.com:443
👍 1
Ryan Gallier
12/09/2022, 4:18 PMand probably a ton of other options in there to dig deeper
Ryan Gallier
12/09/2022, 4:18 PM Copy code
SSL-Session:
Protocol : TLSv1.3
Cipher : TLS_AES_256_GCM_SHA384j
Jon Bucud
12/09/2022, 4:21 PMYou're looking for a free internal Qualys/Nessus type of scan Ray?
r
Ray Davis
12/09/2022, 4:22 PMYes sir,
j
Jon Bucud
12/09/2022, 4:25 PMall windows? all 443? or something that will portscan and then see if terminated in tls?
r
Ray Davis
12/09/2022, 4:28 PMMostly windows, and Free BSOD, AHV. Just looking to capture what is considered weak ciphers now. Like a internal scan of Nexpos, Qualys type software. I see a free tool on Qualys. I need to check it out. I see security onion has things as well. Really just more me to make sure what I think is weak is actually true.
Ray Davis
12/09/2022, 4:29 PMAll the others, I need to look at as well that other sent.
r
Ryan Gallier
12/09/2022, 4:31 PMFree BSOD? Isn't that... Windows? 😄🤣
r
Ray Davis
12/09/2022, 4:33 PMHAHA. Yea, Meant BSD
r
Ryan Gallier
12/09/2022, 4:33 PMi know. 🙂
👍 1
Ryan Gallier
12/09/2022, 4:33 PMthat's a good one though, I may use that somewhere. LOL
j
Jon Bucud
12/09/2022, 4:33 PMWhat thread am I in? the hotfix one or....
Jon Bucud
12/09/2022, 4:34 PMFor Windows, I've had this in my bookmarks, it's dated... but I've used it in the past
https://www.cyberdrain.com/monitoring-with-powershell-monitoring-cipher-suites-and-get-a-ssllabs-a-rank/
👍 1
r
Ray Davis
12/09/2022, 4:35 PMThats neat
p
Pat Coughlin
12/15/2022, 2:08 PMIf you are hardcore you can watch the cipher exchange in Wireshark. It occurs in plain text before the encryption really kicks off. It's nice because you can see both sides of the negotiations.