projectdiscovery / tlsx

Fast and configurable TLS grabber focused on TLS based data collection.
MIT License
838 stars 76 forks source link

Support for SSLv2.0 and its cipher suites #511

Open xploit101 opened 5 months ago

xploit101 commented 5 months ago

Are there plans for the ability to scan for SSLv2.0 and its cipher suites.

I tried using the openSSL binary from drwetter (https://github.com/drwetter/openssl-1.0.2.bad), which does allow SSLv2.0 and its cipher suites to be enumerated at TestSSL (https://github.com/drwetter/testssl.sh).

However, I had no success. If I pass the binary along as the next command, I get an empty response:

tlsx -openssl-binary openssl-1.0.2.bad/bin/openssl -sm openssl -ve -ce -u example.com

It would be great if TLSX also supported this, because I still unfortunately see occasional server support for SSLv2.0, and I don't want to miss this when using TLSX as a research tool.