Cyber Risks · PortSwigger Research

SSL Scanner

Summary: PortSwigger's BApp Store lists an SSL Scanner extension for Burp Suite, version 1.2a by Pattara Teerapong and Meatasit Karakate, last updated 25 February 2022. Most of its testing logic comes from testssl.sh, with Heartbleed and CCS Injection test code modified from a2sv.

Why it matters: The extension carries an overall system impact rating of Low and is written by third-party users, with PortSwigger stating it makes no warranty about quality or usefulness for any particular purpose - so the scanner's findings land on your team to validate.

Read the original at PortSwigger Research ↗

Topics
Vulnerabilities & Patching
Related