SSL/TLS Security Scanners
SSL/TLS misconfigurations expose encrypted traffic to interception and downgrade attacks. These scanners validate your certificate chain, detect deprecated protocols (SSLv3, TLS 1.0), flag weak ciphers, and check for well-known TLS vulnerabilities.
Important SSL Controls Scanners
SSL Sweet32 Vulnerability Checker
Check your SSL/TLS configuration for Sweet32 vulnerability. Ensure your server uses modern encryption algorithms like AES or ChaCha20.
SSL Heartbleed Vulnerability Checker
Check your SSL/TLS configuration for Heartbleed vulnerability. Ensure your system is using a patched OpenSSL version.
SSL Poodle Vulnerability Checker
Check your SSL/TLS configuration for POODLE vulnerability. Ensure SSL 3.0 is disabled to prevent downgrade attacks.
SSL Beast Vulnerability Checker
Test your SSL/TLS configuration for BEAST vulnerability. Ensure you are using a secure version of TLS to protect your encrypted communications.
SSL Robot Vulnerability Scanner
Check your SSL/TLS configuration for Robot vulnerability. Ensure your server does not support weak cipher suites like SSL 2.0 or RC4.
SSL DROWN Vulnerability Scanner
Check your SSL/TLS configuration for DROWN vulnerability. Ensure SSLv2 is disabled and your server uses modern encryption protocols.
Deprecated TLS Detection Scanner
Online Deprecated TLS Detection Scanner
SSL Ticketbleed Vulnerability Checker
Targets session ticket handling in SSL/TLS servers, allowing attackers to read out-of-bounds memory and extract sensitive data.
SSL Logjam Vulnerability Checker
Check your SSL/TLS configuration for Logjam vulnerability. Ensure your server uses strong Diffie-Hellman key exchange parameters.
Online Expired SSL Certificate Checker
Expired SSL Certificate Checker
Weak Cipher Suites Detection Scanner
This scanner detects the use of Weak Cipher Suites in digital assets. The identification of weak cipher suites is crucial for ensuring strong encryption practices and maintaining data security.
SSL Freak Vulnerability Scanner
Check your SSL/TLS configuration for FREAK vulnerability. Ensure your server does not support export-grade RSA keys.
SSL VPN Client Remote Code Execution Scanner
Detects 'Remote Code Execution (RCE)' vulnerability in SSL VPN Client.
Mythic C2 Detection Scanner
Identify the stealthy Mythic C2's issuer within your network. Ensure robust detection of Mythic commanding nodes to enhance security monitoring. Valuable for both defensive measures and understanding threat landscapes.
Posh C2 Detection Scanner
Identify the stealthy PoshC2, which is a Powershell-based post-exploitation framework, within your network. This scanner aids in detecting the presence of PoshC2 to enhance network security and protect against unauthorized control channels.
Cobalt Strike C2 Detection Scanner
Identify the stealthy Cobalt Strike within your network. This scanner helps detect the covert channels and post-exploitation agents, ensuring your network's security against long-term embedded threats.
ShadowPad C2 Detection Scanner
Identify the stealthy ShadowPad C2 within your network. Detect and understand ShadowPad’s plugins dynamically loaded from the C2 server to enhance your cybersecurity efforts.
Sliver C2Detection Scanner
Identify the stealthy Sliver C2 within your network. This scanner helps to detect the presence of the Sliver Command and Control system, used by advanced threat actors, ensuring you can take prompt action to secure your network.
Covenant C2 SSL Detection Scanner
Identify the stealthy Covenant C2 within your network. This scanner allows you to detect Covenant command and control frameworks, highlighting potential threats and enhancing security measures.
VenomRAT C2 Detection Scanner
Identify the stealthy VenomRAT within your network. This scanner precisely detects VenomRAT, ensuring robust countermeasures against remote access threats. Optimize your network security by quickly identifying and mitigating RAT infections.
Gozi C2 Detection Scanner
Identify the stealthy Gozi trojan within your network. Gozi is a banking trojan known for its advanced obfuscation techniques, which have enabled data breaches across multiple sectors, and have affected millions. Ensure your systems are safeguarded against this persistent threat.
DcRat Server C2 Detection Scanner
Identify the stealthy DcRat Server C2 within your network. Detecting DcRat's command and control communication can prevent unauthorized access and data breaches. Ensure tighter security and compliance by accurately identifying threats from DcRat Server C2.
Havoc Framework C2 Detection Scanner
Identify the stealthy Havoc C2 within your network. This scanner helps you detect the presence of the Havoc command and control framework, ensuring the security of your systems against unauthorized control attempts.
Quasar RAT C2 Detection Scanner
Identify the stealthy Quasar RAT or its C2 within your network.
Onimai C2 Detection Scanner
Identify the stealthy Onimai RAT within your network. This scanner aids in detecting the presence of Onimai, a Remote Administration Trojan based on Quasar, swiftly and accurately.
Metasploit C2 Detection Scanner
Identify the stealthy Metasploit C2 within your network.
IcedID Malware Detection Scanner
Identify the stealthy IcedID or BokBot within your network. This scanner helps detect the presence of this notorious banking trojan, crucial for safeguarding financial information against unauthorized access and fraudulent activities.
AsyncRAT RAT Detection Scanner
Identify the stealthy AsyncRAT within your network.
Orcus RAT RAT Detection Scanner
Identify the stealthy OrcusRAT within your network. Detect and mitigate remote access threats efficiently to enhance security. Ensure your systems are free from unauthorized control.
Bitrat C2 Detection Scanner
Identify the stealthy Bitrat C2 within your network.
SSL Heart Bleed
Check your SSL/TLS configuration for Heartbleed vulnerability. We want to make sure that you are using correct openSSL libraries that does not have any weakness.
CVE-2014-0224 Scanner
Detects 'CCS Injection (ChangeCipherSpec)' vulnerability in OpenSSL affects v. before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h.
SSL CCS Injection Vulnerability Scanner
Check your SSL/TLS configuration for CCS Injection vulnerability. Ensure your server uses secure cipher suites and follows strict policy controls.
Self Signed Certificate Checker
A self-signed SSL certificate is one that is issued by the site owner themselves, rather than a third-party certificate authority. This type of certificate is not as trusted by apps as those issued by a CA.
SSL Lucky13 Vulnerability Scanner
Check your SSL/TLS configuration for Lucky13 vulnerability. Ensure your system uses secure encryption protocols to mitigate timing attacks.
SSL Breach Vulnerability Checker
Check your SSL/TLS configuration for BREACH vulnerability. Ensure HTTP compression is disabled for sensitive data transfers.
SSL RC4 Cipher Suites Checker
Check if your server supports RC4 cipher suites. Disable RC4 cipher suites and use modern encryption methods like AES or ChaCha20 with TLS 1.2 or TLS 1.3.
SSL Renegotiation Vulnerability Scanner
Check your SSL/TLS configuration for Renegotiation vulnerability. Ensure your server does not support insecure renegotiation.
Online Certificate Expiration Date Checker
This tool checks the expiration date of the SSL certificate on the target and reports if there is an expired certificate.
SSL Crime Vulnerability Scanner
Check your SSL/TLS configuration for CRIME vulnerability. Ensure your server does not use HTTP compression for encrypted sessions.
Self Signed SSL Certificate Detection
Online Self Signed SSL Certificate Detection
HTTP Usage Detection Scanner
Detect SSL/TLS Implemented or not
SSL Poodle
Check your SSL/TLS configuration for Poodle vulnerability. Make sure that you are using secure communication that is not breakable.
SSL Service's Certificate Vulnerability Scanner
You can get private IPv4 addresses information using this tool.
SSL Perfect Forward Secrecy Checker
Check if your server supports Perfect Forward Secrecy cipher suites. Ensure your server uses ECDHE or DHE with TLS 1.2 or TLS 1.3.
SSL TLS_FALLBACK_SCSV Mitigation Checker
Check your SSL/TLS configuration for TLS_FALLBACK_SCSV vulnerability mitigation. Ensure both client and server support this extension to prevent fallback attacks.
Revoked SSL Certificate Scanner
This scanner detects the use of Revoked SSL Certificate in digital assets.
SSL Crime
Check your SSL/TLS configuration for Crime vulnerability. Compression methods you are using may put you into danger. Let's check your SSL for compression security.
Mismatched SSL Certificate Detection Scanner
Mismatched SSL Certificate Detection Scanner
Kubernetes Fake Ingress Certificate Scanner
This scanner detects the use of Kubernetes Fake Ingress Certificate in digital assets.
Insecure Cipher Suite Detection Scanner
This scanner detects the use of Insecure Cipher Suite Detection in digital assets. It identifies weak encryption algorithms that can be targeted by attackers, offering essential insights for strengthening system security.
Fortinet FortiManager Certificate Detection Scanner
This scanner detects the use of Fortinet FortiManager Certificate in digital assets.
SSL/TLS Supported Cipher
Check your SSL/TLS configuration for supported ciphers. Do not use weak ciphers. Also learning supported SSL cipher and making cross check with supported ones by security devices can be very important.
SSL DNS Names Scanner
This scanner detects the use of SSL DNS Names in digital assets.
Wildcard TLS Certificate Scanner
This scanner detects the use of Wildcard TLS Certificate in digital assets. It helps in identifying certificates with wildcard CN or SAN entries for enhanced security awareness.
Fortinet FortiAuthenticator Certificate Detection Scanner
This scanner detects the use of Fortinet FortiAuthenticator Certificate in digital assets.
SSL Fingerprint Scanner
This scanner detects the SHA256 fingerprint of OpenSSL in digital assets.
Untrusted Root Certificate Scanner
This scanner detects the use of Untrusted Root Certificate in digital assets.
TLS Version Detection Scanner
Online TLS Version Detection Scanner
Fortinet FortiAnalyzer Certificate Detection Scanner
This scanner detects the certificate of Fortinet FortiAnalyzer in digital assets.
Run all SSL Controls checks at once.
S4E covers 66+ scanners in this category with continuous monitoring and full remediation guidance.
Start Free Scan →