About tlsx-probe
tlsx-probe is a TLS certificate analysis skill based on ProjectDiscovery's tlsx tool, for security testing and asset enumeration. It covers certificate details, TLS configuration and fingerprint probing, including pipelines with subdomain and port scanners.
Key features
- 01Extract certificate SAN, CN, and issuer
- 02Inspect TLS versions and cipher suites
- 03Generate JARM fingerprints
- 04Check for expired and self-signed certificates
- 05Support JSON output and piped processing
Use cases
- 01Collect TLS certificate details for target domains
- 02Check certificate expiry, self-signing, and TLS configuration
- 03Derive subdomain leads from certificate SANs
- 04Feed subdomain or port-scan results into TLS probes
Install
Copy the command and run it in a terminal.
$
npx skills add https:/After installing, type/tlsx-probein Claude Code to confirm it loaded.
Details
From the project READMEtlsx TLS 证书分析方法论
tlsx 是 ProjectDiscovery 出品的 TLS 探针工具。核心优势：证书信息提取 + JARM/JA3 指纹 + 配置错误检测 + 管道友好。
项目地址：https://github.com/projectdiscovery/tlsx
Phase 1: 基本探测
# 单个目标
echo target.com | tlsx
# 提取证书信息
echo target.com | tlsx -san -cn -so -silent
# TLS 版本和加密套件
echo target.com | tlsx -tv -cipher -silent
# JARM 指纹
echo target.com | tlsx -jarm -silent
Phase 2: 证书分析
# 完整证书信息
echo target.com | tlsx -san -cn -so -tv -cipher -jarm -json
# 证书过期检测
echo target.com | tlsx -ex -silent
# 自签名检测
echo target.com | tlsx -ss -silent
# 域名不匹配检测
echo target.com | tlsx -mm -silent
# 批量检测证书问题
tlsx -l hosts.txt -ex -ss -mm -re -un -silent
Phase 3: 管道集成
# 子域名 → TLS 证书收集
subfinder -d target.com -silent | tlsx -san -cn -resp-only -silent
# 端口扫描 → TLS 探测
naabu -host target.com -p 443,8443 -silent | tlsx -san -cn -silent
# 从 TLS SAN 发现更多子域名
echo target.com | tlsx -san -resp-only -silent | sort -u
# JSON 输出
tlsx -l hosts.txt -san -cn -tv -jarm -json -o results.json
Comments
Markdown supported