# SSL/TLS y algoritmos de cifrados

## Cipherscan

* <https://github.com/mozilla/cipherscan>

```shell
./cipherscan <target>
./analyze.py <target>
```

## Nmap

```shell
nmap --script ssl-cert,ssl-enum-ciphers -p 443 <target> -oN nmap-cert-ciphers.txt
```

* \--script ssl-cert, ssl-enum-ciphers = identificación de certificado y enumeración de algoritmos de cifrados.
* -p = puertos.
* \<target> = objetivo.
* -oN = guarda resultado en archivo `nmap-cert-ciphers.txt`.

## Nuclei

```sh
nuclei -u <target> -t ssl -ts -silent
```

## Qualys

* <https://www.ssllabs.com/>

## sslscan

* <https://github.com/rbsec/sslscan>

```shell
sslscan <target>
```

## testssl

* <https://github.com/drwetter/testssl.sh>

```shell
testssl <target>
```

## TLS-Attacker

* <https://github.com/tls-attacker/TLS-Attacker>