tlsx

all

Fast and configurable TLS grabber focused on TLS based data collection and analysis.

More info →

Options (15)

-uboolean

Display TLS version and cipher of one or more hosts

Example: tlsx {{[-u|-host]}} {{host1,host2,...}} {{[-tv|-tls-version]}} -cipher

boolean

Display TLS version and cipher of one or more hosts

Example: tlsx {{[-u|-host]}} {{host1,host2,...}} {{[-tv|-tls-version]}} -cipher

boolean

Enumerate and display supported TLS versions and ciphers of a host

Example: tlsx {{[-u|-host]}} {{host}} {{[-ve|-version-enum]}} {{[-ce|-cipher-enum]}}

boolean

Enumerate and display supported TLS versions and ciphers of a host

Example: tlsx {{[-u|-host]}} {{host}} {{[-ve|-version-enum]}} {{[-ce|-cipher-enum]}}

-lboolean

Scan a list of hosts from a file and mark hosts with expired/self-signed/mismatched/revoked/untrusted certificates

Example:

tlsx {{[-l|-list]}} {{path/to/hosts.txt}} {{[-ex|-expired]}} {{[-ss|-self-signed]}} {{[-mm|-mismatched]}} {{[-re|-revoked]}} {{[-un|-untrusted]}}

boolean

Scan a list of hosts from a file and mark hosts with expired/self-signed/mismatched/revoked/untrusted certificates

Example:

tlsx {{[-l|-list]}} {{path/to/hosts.txt}} {{[-ex|-expired]}} {{[-ss|-self-signed]}} {{[-mm|-mismatched]}} {{[-re|-revoked]}} {{[-un|-untrusted]}}

boolean

Scan a list of hosts from a file and mark hosts with expired/self-signed/mismatched/revoked/untrusted certificates

Example:

tlsx {{[-l|-list]}} {{path/to/hosts.txt}} {{[-ex|-expired]}} {{[-ss|-self-signed]}} {{[-mm|-mismatched]}} {{[-re|-revoked]}} {{[-un|-untrusted]}}

boolean

Scan a list of hosts from a file and mark hosts with expired/self-signed/mismatched/revoked/untrusted certificates

Example:

tlsx {{[-l|-list]}} {{path/to/hosts.txt}} {{[-ex|-expired]}} {{[-ss|-self-signed]}} {{[-mm|-mismatched]}} {{[-re|-revoked]}} {{[-un|-untrusted]}}

boolean

Scan a list of hosts from a file and mark hosts with expired/self-signed/mismatched/revoked/untrusted certificates

Example:

tlsx {{[-l|-list]}} {{path/to/hosts.txt}} {{[-ex|-expired]}} {{[-ss|-self-signed]}} {{[-mm|-mismatched]}} {{[-re|-revoked]}} {{[-un|-untrusted]}}

boolean

Scan a list of hosts from a file and mark hosts with expired/self-signed/mismatched/revoked/untrusted certificates

Example:

tlsx {{[-l|-list]}} {{path/to/hosts.txt}} {{[-ex|-expired]}} {{[-ss|-self-signed]}} {{[-mm|-mismatched]}} {{[-re|-revoked]}} {{[-un|-untrusted]}}

-cboolean

Adjust per host concurrency, timeout, retry and delay parameters when scanning a list of hosts for wildcard SSL certificates

Example:

tlsx {{[-l|-list]}} {{path/to/hosts.txt}} {{[-c|-concurrency]}} {{300}} -timeout {{5}} -retry {{3}} -delay {{200ms}} {{[-wc|-wildcard-cert]}}

boolean

Adjust per host concurrency, timeout, retry and delay parameters when scanning a list of hosts for wildcard SSL certificates

Example:

tlsx {{[-l|-list]}} {{path/to/hosts.txt}} {{[-c|-concurrency]}} {{300}} -timeout {{5}} -retry {{3}} -delay {{200ms}} {{[-wc|-wildcard-cert]}}

-jboolean

Display Subject Alternative Names (SANs) from the TLS certificate of a host, with JSON output written to a file

Example: tlsx {{[-u|-host]}} {{host}} -san {{[-j|-json]}} {{[-o|-output]}} {{path/to/file.json}}

-oboolean

Display Subject Alternative Names (SANs) from the TLS certificate of a host, with JSON output written to a file

Example: tlsx {{[-u|-host]}} {{host}} -san {{[-j|-json]}} {{[-o|-output]}} {{path/to/file.json}}

boolean

Perform a self health-check of `tlsx` itself

Example: tlsx {{[-hc|-health-check]}}

Examples (7)

Display TLS version and cipher of one or more hosts

tlsx [-u|-host] host1,host2,... [-tv|-tls-version] -cipher

Enumerate and display supported TLS versions and ciphers of a host

tlsx [-u|-host] host [-ve|-version-enum] [-ce|-cipher-enum]

Scan a list of hosts from a file and mark hosts with expired/self-signed/mismatched/revoked/untrusted certificates

Adjust per host concurrency, timeout, retry and delay parameters when scanning a list of hosts for wildcard SSL certificates

tlsx [-l|-list] path/to/hosts.txt [-c|-concurrency] 300 -timeout 5 -retry 3 -delay 200ms [-wc|-wildcard-cert]

Display unique hostname(s) from SSL certificate response

tlsx [-u|-host] host -dns

Display Subject Alternative Names (SANs) from the TLS certificate of a host, with JSON output written to a file

tlsx [-u|-host] host -san [-j|-json] [-o|-output] path/to/file.json

Perform a self health-check of `tlsx` itself

tlsx [-hc|-health-check]

made by @shridhargupta | data from tldr-pages