SSL Fingerprint Scanner
This scanner detects the SHA256 fingerprint of OpenSSL in digital assets.
Short Info
Level
Informational
Single Scan
Single Scan
Can be used by
Everyone
Estimated Time
10 seconds
Time Interval
1 month 4 days
Scan only one
Domain, IPv4, Subdomain
Toolbox
-
OpenSSL is a commonly used software library for implementing SSL/TLS encryption in secure communications. It plays a critical role in securing web servers, email servers, and other network-facing applications. This scanner is designed to extract and verify the SHA256 fingerprint from OpenSSL installations on target assets.
The scanner focuses on detecting SHA256 fingerprints generated by OpenSSL. By leveraging the `openssl s_client` command, it identifies the cryptographic fingerprint associated with the SSL/TLS certificate in use. This enables security teams to confirm the presence of OpenSSL in their infrastructure.
Technical details include executing the `openssl s_client` command with a timeout parameter, extracting the SHA256 fingerprint from the output, and parsing relevant details. The scanner operates on the assumption that the SSL/TLS connection responds correctly and outputs a valid certificate fingerprint.
If OpenSSL-related fingerprints are not monitored, attackers might exploit unpatched vulnerabilities, leading to unauthorized access or data interception. Identifying fingerprints helps organizations prioritize updates and secure assets by identifying their cryptographic configurations.
REFERENCES
