web.testssltestssl.sh deep TLS scan
Runs testssl.sh against an https target: protocols, cipher categories, server defaults and known TLS vulnerabilities (BEAST, LOGJAM, ROBOT, Heartbleed, ...). Opens hundreds of TLS handshakes to the target and takes minutes, so it is opt-in. Complements web.tls, whose expiry/trust/legacy-protocol checks it does not repeat. Custom headers are not used (no HTTP requests are made except a compression probe).
- Engine
- Wrapped scanner
- Wraps
testssl.sh- Targets
- URL, Web app
- Areas
- Security
- Runs
- Opt-in: only when selected with --only
- Network
- Only the target itself
Run only this auditor
bunx openaudit https://example.com --only web.testsslWraps testssl.sh. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.