Scanning TLS Server Configurations With Burp Suite

In this post, we present our new Burp Suite extension "TLS-Attacker".
Using this extension penetration testers and security researchers can assess the security of TLS server configurations directly from within Burp Suite.
The extension is based on the TLS-Attacker framework and the TLS-Scanner, both of which are developed by the Chair for Network and Data Security.

You can find the latest release of our extension at: https://github.com/RUB-NDS/TLS-Attacker-BurpExtension/releases

TLS-Scanner

Thanks to the seamless integration of the TLS-Scanner into the BurpSuite, the penetration tester only needs to configure a single parameter: the host to be scanned.  After clicking the Scan button, the extension runs the default checks and responds with a report that allows penetration testers to quickly determine potential issues in the server's TLS configuration.  Basic tests check the supported cipher suites and protocol versions.  In addition, several known attacks on TLS are automatically evaluated, including Bleichenbacher's attack, Padding Oracles, and Invalid Curve attacks.

Furthermore, the extension allows fine-tuning for the configuration of the underlying TLS-Scanner.  The two parameters parallelProbes and overallThreads can be used to improve the scan performance (at the cost of increased network load and resource usage).

It is also possible to configure the granularity of the scan using Scan Detail and Danger Level. The level of detail contained in the returned scan report can also be controlled using the Report Detail setting.

Please refer to the GitHub repositories linked above for further details on configuration and usage of TLS-Scanner.

Scan History 

If several hosts are scanned, the Scan History tab keeps track of the preformed scans and is a useful tool when comparing the results of subsequent scans.

Additional functions will follow in later versions

Currently, we are working on integrating an at-a-glance rating mechanism to allow for easily estimating the security of a scanned host's TLS configuration.

This is a combined work of Nurullah Erinola, Nils Engelbertz, David Herring, Juraj Somorovsky, Vladislav Mladenov, and Robert Merget.  The research was supported by the European Commission through the FutureTrust project (grant 700542-Future-Trust-H2020-DS-2015-1).

If you would like to learn more about TLS, Juraj and Robert will give a TLS Training at Ruhrsec on the 27th of May 2019. There are still a few seats left.

More articles

1. How To Make Hacking Tools
2. Blackhat Hacker Tools
3. What Are Hacking Tools
4. Hack Tools For Games
5. Pentest Tools Open Source
6. Hacker Tools For Pc
7. New Hacker Tools
8. Pentest Tools Website Vulnerability
9. Hacking Tools For Mac
10. Pentest Box Tools Download
11. Pentest Tools For Windows
12. Pentest Tools Bluekeep
13. Hackers Toolbox
14. Hack Tool Apk No Root
15. Hacking Tools For Games
16. New Hack Tools
17. World No 1 Hacker Software
18. Bluetooth Hacking Tools Kali
19. Pentest Reporting Tools
20. Easy Hack Tools
21. Pentest Recon Tools
22. Pentest Tools Kali Linux
23. Physical Pentest Tools
24. Hacker Search Tools
25. Pentest Tools Bluekeep
26. Hacker Tools 2020
27. Best Hacking Tools 2019
28. Hacking Tools And Software
29. Pentest Tools Github
30. Hacker Tools Free
31. Hacking Tools Free Download
32. Hacker Tools Mac
33. Ethical Hacker Tools
34. Pentest Tools Review
35. Beginner Hacker Tools
36. Tools For Hacker
37. Easy Hack Tools
38. New Hack Tools
39. Hack Tools Online
40. Wifi Hacker Tools For Windows
41. Pentest Tools Android
42. Hackers Toolbox
43. Hacker Tool Kit
44. Hacking Tools
45. Hacking Tools Download
46. Hacking Tools 2020
47. Hacker Hardware Tools
48. What Is Hacking Tools
49. Beginner Hacker Tools
50. Hacking Tools
51. How To Install Pentest Tools In Ubuntu
52. Pentest Tools Framework
53. Hack Tools Download
54. Hacker Tools 2019
55. Pentest Automation Tools
56. How To Hack