Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
nyrahul committed Jun 17, 2023
1 parent 8652109 commit a8bb49d
Showing 1 changed file with 3 additions and 22 deletions.
25 changes: 3 additions & 22 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,24 +40,11 @@ $ kubectl logs -n kubetls $(kubectl get pod -n kubetls -l job-name=kubetls -o na
| wordpress-mysql/wordpress | 10.100.189.9:80 | NO_TLS | | | | | |
```

## Scan any general addresses

One can provide a list of addresses as part of address list file and get it scanned.
## Scan container environment

```
❯ ./src/tlsscan.sh --csv /tmp/out.csv -f addr.list; csvlook /tmp/out.csv
checking [google.com:443 Google]...
checking [accuknox.com:443 Accuknox]...
checking [expired.badssl.com:443 BadSSL]...
checking [wrong.host.badssl.com:443 BadSSL]...
checking [self-signed.badssl.com:443 BadSSL]...
checking [untrusted-root.badssl.com:443 BadSSL]...
checking [revoked.badssl.com:443 BadSSL]...
checking [pinning-test.badssl.com:443 BadSSL]...
checking [dh480.badssl.com:443 BadSSL]...
checking [isunknownaddress.com:12345 LocalTest]...
checking [localhost:1234]...
checking [localhost:22 namespace:deployment/wordpress]...
docker run --rm -v $PWD:/home/kubetls/data nyrahul/tlsscan --infile data/addr.list --csv data/out.csv
| Name | Address | Status | Version | Ciphersuite | Hash | Signature | Verification |
| ------------------------------ | ----------------------------- | -------- | ------- | --------------------------- | ------ | --------- | -------------------------------------------- |
| Google | google.com:443 | TLS | TLSv1.3 | TLS_AES_256_GCM_SHA384 | SHA256 | ECDSA | OK |
Expand All @@ -73,12 +60,6 @@ checking [localhost:22 namespace:deployment/wordpress]...
| localhost:1234 | localhost:1234 | CONNFAIL | | | | | |
| namespace:deployment/wordpress | localhost:22 | CONNFAIL | | | | | |
```

## Scan container environment

```
docker run --rm -v $PWD:/home/kubetls/data nyrahul/tlsscan --infile data/addr.list --csv data/out.csv
```
> Note: The command assumes that the current folder contains `addr.list` file containing the list of addresses to scan.
## Roadmap
Expand Down

0 comments on commit a8bb49d

Please sign in to comment.