Cipherseer

Parses testssl.sh JSON output and queries ciphersuite.info for security rating of ciphers.

Requirments

• Python 3.6+
• Requests
• Tabulate

Usage

1. First run testssl.sh against the target server(s). Ensure you save the output to JSON.

$ testssl.sh --json https://example.com

2. Once testssl.sh finishes, run the script with the JSON output.

$ python3 main.py example.json

Quirks

• The script expects the testssl.sh scan to be performed with default checks, ordering, and formatting. So if you changed any of these, e.g. using --mapping, then the script will not work correctly.
• The ciphersuite.info API does not include explanations on why a cipher might be weak. For that you'll have to visit the ciphersuite.info website yourself.