Awesome

THIS PROJECT IS NOT BEING ACTIVELY MAINTAINED. SEE DEEPVIOLET PROJECT NOTES FOR MORE DETAILS. JUN 27, 2019 --MILTON

OWASP DeepVioletTools

OWASP Project Page | WIKI | DV API JavaDocs

DeepViolet(DV) is a TLS/SSL scanning API written in Java. To keep DV easy to use, identify bugs, reference implementations have been developed in this project that consume the DV API. If you want to see what DV can do, use it from the command line in your scripts or use the graphical tool from the comfort of your desktop. Both tools can be used to scan HTTPS web servers to check server certificate trust chains, revocation status, check certificates for pending expiration, weak signing algorithms and much more. Original blog article post describing this project, http://www.securitycurmudgeon.com/2014/07/ssltls-introspection.html

Screenshots

Run DV from the UI from the desktop.

java -jar dvUI.jar

Run DV from the shell on the command line.

java -jar dvCMD.jar -serverurl https://www.github.com/ -s thrcisn

Acknowledgements

This tool impliments ideas, code, and takes inspriation from other projects and leaders like: Qualys SSL Labs and Ivan Ristić, OpenSSL, and Oracle's Java Security Team. Many thanks negotiating TLS/SSL handshakes and ciphersuite handling adapted from code examples by Thomas Pornin.

Looking for more information? See the project wiki or the API wiki

<i>This project leverages the works of other open source community projects and is provided for educational purposes. Use at your own risk. See LICENSE for further information.</i>