|
|
Would you be so kind as to reconsider your decision? The current version (1.6.0) of CryptoLyzer covers the functionality of the following tools that are already in Kali Linux
- SSLyze
- testssl.sh
- ssh-audit
- ike-scan
However, there are differentiators
vs SSLyze and testssl.sh (TLS/SSL)
- 400+ cipher suites, own protocol implementation, not OpenSSL-backed
- GOST, ShangMi, post-quantum hybrid key exchange
- Diffie-Hellman parameters
- safe prime check
- well-known and RFC 7919 group identification
- ephemeral key reuse detection
- Fingerprinting
- JA3, JA4 generation, JA3 decoding
- server mode capturing connecting clients
- Opportunistic TLS, 13 protocols
- FTP, IMAP, LDAP, LMTP, MySQL, NNTP, OpenVPN, POP3, PostgreSQL, RDP, Sieve, SMTP, XMPP
- HTTP headers, 22 parsed to their components, not only detected
- Content-Security-Policy, Content-Security-Policy-Report-Only, X-Content-Security-Policy
- Strict-Transport-Security, Public-Key-Pinning, Expect-CT, Expect-Staple
- X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy
- Set-Cookie, NEL, Server
- Cache-Control, Pragma, Age, Date, Expires, Last-Modified, ETag, Content-Type
vs ssh-audit (SSH)
- HASSH fingerprints, server and client side
- Host keys
- X.509 certificates and chains
- OpenSSH certificates v00, v01
- SSHFP records cross-verified against handshake host keys
- Terrapin and Sweet32 as named results
vs ike-scan (IKE)
- IKEv2, not only IKEv1
- Enumeration, not one hand-written proposal set per run
- every accepted transform combination
- every accepted DH group and elliptic curve
- Server public keys and X.509 chains
- IKEv1 aggressive mode, IKEv2 EAP mode
- Accepted certification authority hashes from Certificate Request payloads
- Advertised extensions and vendor identifiers
- Proposal simulation in strongSwan, Libreswan, Openswan, IANA spelling
DNS
- Parsed to their components, not only detected
- DNSSEC: DNSKEY, DS, RRSIG
- Mail: DMARC, SPF, MTA-STS
- SSHFP
Across all four
- One command, one target syntax, one output format
- JSON and Markdown output
- Python API
- Packaging
- Debian
- RPM
- OBS repositories
- Distributions
- Debian
- Arch User Repository
- Generic vulnerability handling
- every algorithm, key, DH parameter and curve carries its own vulnerability records
- new algorithm or new attack means a database record, not a new check
|
