mcpField
P
performing-ssl-tls-security-assessment

performing-ssl-tls-security-assessment

github.com/mukul975Security35.2k161 installsUpdated 8w ago
Repository

About performing-ssl-tls-security-assessment

A security assessment guide using sslyze to evaluate SSL/TLS server configurations. It is intended for security testers auditing TLS controls and covers protocol support, certificates, cipher suites, known vulnerabilities, and JSON reporting.

Key features

  1. 01Check SSL/TLS protocol versions
  2. 02Assess cipher suites and certificate chains
  3. 03Check HSTS and OCSP stapling
  4. 04Scan for Heartbleed, ROBOT, and other weaknesses
  5. 05Generate JSON reports with remediation guidance

Use cases

  1. 01Audit HTTPS server TLS configurations
  2. 02Review certificate validity and cipher strength
  3. 03Check servers for known TLS vulnerabilities

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/mukul975/anthropic-cybersecurity-skills --skill performing-ssl-tls-security-assessment

After installing, type/performing-ssl-tls-security-assessmentin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

LICENSE
references/
api-reference.md
scripts/
agent.py

Details

From the project README

Performing SSL/TLS Security Assessment

Overview

Assess SSL/TLS server configurations using sslyze, a fast Python-based scanning library. This skill covers evaluating supported protocol versions (SSLv2/3, TLS 1.0-1.3), cipher suite strength, certificate chain validation, HSTS enforcement, OCSP stapling, and scanning for known vulnerabilities including Heartbleed, ROBOT, and session renegotiation weaknesses.

When to Use

  • When conducting security assessments that involve performing ssl tls security assessment
  • When following incident response procedures for related security events
  • When performing scheduled security testing or auditing activities
  • When validating security controls through hands-on testing

Prerequisites

  • Python 3.9+ with sslyze library (pip install sslyze)
  • Network access to target HTTPS servers on port 443
  • Understanding of TLS protocol versions and cipher suite classifications

Steps

Step 1: Configure Server Scan

Create ServerScanRequest with ServerNetworkLocation specifying target hostname and port.

Step 2: Execute TLS Scan

Use sslyze Scanner to queue and execute scans for all TLS check commands concurrently.

Step 3: Analyze Results

Evaluate accepted cipher suites, certificate validity, protocol versions, and vulnerability scan results.

Step 4: Generate Security Report

Produce a JSON report with compliance findings and remediation recommendations.

Expected Output

JSON report with supported protocols, accepted cipher suites, certificate details, vulnerability results (Heartbleed, ROBOT), and HSTS status.

Comments

Markdown supported