Skip to content

Releases: tls-attacker/TLS-Scanner

TLS-Scanner 4.2.0

08 Jun 21:11
bdc8464
Compare
Choose a tag to compare

Implemented Prototype for TLS client scanning
Added ability to print sitereporrt as json
TLS-Scanner can now dynamically bypass some amount of intolerances due to dynamic base config selection
Reworked POM
Moved vulnerability evaluation from TLS-Attacker to TLS-Scanner
Introduced 2 new modules TLS-Scanner-Core and Scanner-Core which bundle generic Scanner code and TLS specific scanner code that can be used by either client or server scanners or also for other protocols
Introduced more meaningful TestResults, that can now express more nuances
Introduced a probe for RecordLayer fragementation support
Introduced probes to analyze random numbers
Bleichenbacher Probe now also performs statistical tests to evaluate a possible vulnerability
Introoduced tests for BSI and NIST guidelines
Removed TlsPoodle Probe (was already covered by Padding Oracle Probe)
TLS-Scanner can now use custom CA's to evaluate certificate trust
Minor changes towards code quality and maintainability
Fixed a bug which caused the JVM to still run even after the scan has finished
Introduced SignatureAndHashAlgorithm probe which evaluates which constants are supported by the server
Introduced SignatureAndHashAlgorithm order probe which checks if the server is enforcing its preferences
Introduced NamedGroups order probe which checks if the server is enforcing its preferences
Moved TLS-Scanner to Java 11
Runnaway probes are now automatically killed after a fixed amount of time to prevent infinite loops
Fixed a bug in the Sweet32 probe which caused wrong results
Added a test that checks if the server is using a unix timestamp in its random

TLS-Scanner 4.1.3

21 Dec 09:11
5e51cb1
Compare
Choose a tag to compare

Fixes log4shell -> Log4j 2.17.0

TLS-Scanner 4.1.2

17 Dec 16:35
a4315d7
Compare
Choose a tag to compare

Fix for log4sh

TLS-Scanner 2.11.2

18 Dec 12:49
Compare
Choose a tag to compare

TLS-Scanner 2.11 with Log4Shell fix

TLS-Scanner 4.1.1

16 Jun 11:49
47d6039
Compare
Choose a tag to compare

Added dynamic ProbeList

TLS-Scanner 4.1.0

09 Jun 14:20
8987363
Compare
Choose a tag to compare

Fixed some false positive/false negative findings
Added ALPACA Probe
Added ALPN Probe
Cleanups

TLS-Scanner 4.0.0

04 Nov 17:39
Compare
Choose a tag to compare

Major rework of the TLS-Scanner structure to prepare it for future TLS-Client-Scanners.
Added Raccoon and Direct Raccoon Probes
Reworked Invalid Curve Probe
Added OCSP Probe
More detailed certificate scans
Restructured TLS 1.3 probe
Added client authentication Probe

TLS-Scanner 3.0.2

12 Nov 08:56
Compare
Choose a tag to compare

Fixed trustanchor exception

TLS-Scanner 3.0.1

11 Nov 17:17
Compare
Choose a tag to compare

Updated version of TLS-Attacker

TLS-Scanner 3.0.0

07 Nov 17:15
250ef70
Compare
Choose a tag to compare
  • Rating system
  • Recommendation system
  • Task scheduling
  • Analysis of tasks
  • Diverse bug fixes