Scanning TLS Server Configurations With Burp Suite

In this post, we present our new Burp Suite extension "TLS-Attacker".
Using this extension penetration testers and security researchers can assess the security of TLS server configurations directly from within Burp Suite.
The extension is based on the TLS-Attacker framework and the TLS-Scanner, both of which are developed by the Chair for Network and Data Security.

You can find the latest release of our extension at: https://github.com/RUB-NDS/TLS-Attacker-BurpExtension/releases

TLS-Scanner

Thanks to the seamless integration of the TLS-Scanner into the BurpSuite, the penetration tester only needs to configure a single parameter: the host to be scanned.  After clicking the Scan button, the extension runs the default checks and responds with a report that allows penetration testers to quickly determine potential issues in the server's TLS configuration.  Basic tests check the supported cipher suites and protocol versions.  In addition, several known attacks on TLS are automatically evaluated, including Bleichenbacher's attack, Padding Oracles, and Invalid Curve attacks.

Furthermore, the extension allows fine-tuning for the configuration of the underlying TLS-Scanner.  The two parameters parallelProbes and overallThreads can be used to improve the scan performance (at the cost of increased network load and resource usage).

It is also possible to configure the granularity of the scan using Scan Detail and Danger Level. The level of detail contained in the returned scan report can also be controlled using the Report Detail setting.

Please refer to the GitHub repositories linked above for further details on configuration and usage of TLS-Scanner.

Scan History 

If several hosts are scanned, the Scan History tab keeps track of the preformed scans and is a useful tool when comparing the results of subsequent scans.

Additional functions will follow in later versions

Currently, we are working on integrating an at-a-glance rating mechanism to allow for easily estimating the security of a scanned host's TLS configuration.

This is a combined work of Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, Vladislav Mladenov, and Robert Merget.  The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

If you would like to learn more about TLS, Juraj and Robert will give a TLS Training at Ruhrsec on the 27th of May 2019. There are still a few seats left.

Related news

1. Pentest Tools Linux
2. Hak5 Tools
3. Free Pentest Tools For Windows
4. Hack Tools For Ubuntu
5. Pentest Tools Open Source
6. Hacker Tools 2020
7. Github Hacking Tools
8. Hack And Tools
9. Game Hacking
10. Hack Tools Download
11. Hacker Tools For Pc
12. Hacking Tools For Games
13. Hack Tool Apk No Root
14. New Hacker Tools
15. Hacker Security Tools
16. Hack Apps
17. Game Hacking
18. Hack App
19. Android Hack Tools Github
20. Hack Tool Apk No Root
21. New Hacker Tools
22. Pentest Tools For Android
23. Hacker Tools For Mac
24. Hacker Tool Kit
25. Pentest Reporting Tools
26. Best Hacking Tools 2019
27. Hacker Tools Github
28. How To Make Hacking Tools
29. Hacker Tool Kit
30. Hack Tools For Windows
31. Hacking Tools Hardware
32. Pentest Tools Review
33. Hacking Tools Mac
34. Pentest Tools For Android
35. Hack Tools Mac
36. Hacking Tools Download
37. Black Hat Hacker Tools
38. Hacker Tools For Mac
39. Hacking Tools Windows
40. Hacking App
41. Pentest Tools Port Scanner
42. Hacker Hardware Tools
43. Black Hat Hacker Tools
44. Blackhat Hacker Tools
45. Pentest Box Tools Download
46. Hacker Tools For Windows
47. Black Hat Hacker Tools
48. Pentest Tools Framework
49. How To Hack
50. Hacker Tools 2019
51. Android Hack Tools Github
52. Hacking Tools
53. Hacker Tools List
54. Hacker Security Tools
55. What Are Hacking Tools
56. Hacking Tools For Beginners
57. Top Pentest Tools
58. Pentest Reporting Tools
59. Hack Tools For Games
60. Best Hacking Tools 2019
61. Hacking Tools For Pc
62. Hack Rom Tools
63. Hacking Tools Kit