CryptoLyzer

Fast and flexible server #cryptographic (#TLS/#SSL/#SSH) settings #analyzer library for #Python with #CLI

#cybersecurity #infosecurity #infosec #itsec #hacker

[Szilárd Pfeiffer @pfeifferszilard]

My first, but hopefully not the last paper on @IEEEAccess! With @TihanyiNorbert we discussed my earlier CVEs about #DHEat, a #DoS attack against the KEX algo of @WhitfieldDiffie + @MartinHellman2, heroes of #cryptography.

https://t.co/P4TnJwLlAr

#cybersecurity #redteam #offsec

[CryptoLyzer @CryptoLyzer]

Version 0.12.3 has been released with #TLS inappropriate version fallback alerts (RFC 7507) and early TLS deprecated version (RFC 8996) checker for version and #vulnerability analyzer.

https://t.co/IKhYaY07bx

#infosec #infosecurity #CyberSec #audits #hackingtools

[CryptoLyzer @CryptoLyzer]

Released version 0.12.2 with #vulnerability (#DHEat, #Logjam, #Sweet32, #Terrapin #attack/anon DH/NULL encryption/#RC4/missing FS/early versions) checker for #SSH and some bug fixes.

https://t.co/qqsmJkwwJg

#infosec #infosecurity #CyberSec #audits #hackingtools #vulnerabilities

[CryptoLyzer @CryptoLyzer]

Version 0.12.1 of #CryptoLyzer has been released with bug fixes related to #TLS and #SSH analyzers.

https://t.co/zicuHBbvKk

#infosecurity #cybersec #audits #hackingtools #cybersecurity

[CryptoLyzer @CryptoLyzer]

Thanks to @NLnetFD version 0.11.2 of #CryptoLyzer had been released with #HTTP subresource integrity and unencrypted content checker. #TLS client simulation provides a grade for #KEX sizes.

https://t.co/2Klbgv09M8

#infosecurity #cybersec #audits #hackingtools #cybersecurity

[CryptoLyzer @CryptoLyzer]

Thanks to @NLnetFD version 0.11.1 of #CryptoLyzer had been released with post-quantum safe hybrid (#Kyber) algorithm support in #TLS and #X509 certificate support in #SSH analyzer.

https://t.co/k2fnhYUFrN

#infosecurity #cybersec #audits #hackingtools #cybersecurity #PQC #PQS

[CryptoLyzer @CryptoLyzer]

Thanks to @NLnetFDN/@NGIassur version 0.11.0 of #CryptoLyzer had been released. CLI output is now colorized based on the security strength of the algorithms and key sizes used by the server.
https://t.co/oPjU1a7DfN
#infosecurity #cybersec #audits #hackingtools #cybersecurity

[CryptoLyzer @CryptoLyzer]

Thanks to @NLnetFDN and @NGIassur version 0.10.2 of #CryptoLyzer had been released with mail-related DNS record (#MX, #SPF, #DMARC, MTA-STS, TLSRPT) parsing support.

https://t.co/ZsR8xKY4Th

#infosec #infosecurity #CyberSec #audits #hackingtools #cybersecurity

[CryptoLyzer @CryptoLyzer]

Thanks to @NLnetFDN and @NGIassure version 0.10.1 of #CryptoLyzer had been released with DNSSEC key (DNSKEY, DS) and signature (DS) analysis support.

https://t.co/2eeJbkLMoy

#dnssec #infosec #infosecurity #CyberSec #audits #hackingtools #cybersecurity

[CryptoLyzer @CryptoLyzer]

Thanks to @NLnetFDN and @NGIassure version 0.10.0 of #CryptoLyzer had been released with TLS certificate validation against notable trust stores (@Apple, @Google, @Microsoft, @mozilla).

https://t.co/7TsgtBILsK
#infosec #infosecurity #CyberSec #audits #hackingtools #cybersecurity

[CryptoLyzer @CryptoLyzer]

Version 0.9.1 of #CryptoLyzer has already been released with a Certificate Transparency log description for #X509 certificate of servers using #TLS.

Many thanks to @NLnetFDN and @NGIassure for their support.
#infosec #infosecurity #CyberSec #audits #hackingtools #cybersecurity

[CryptoLyzer @CryptoLyzer]

Version 0.9.0 has already been released with @OpenVPN #TLS settings analysis capability.

Many thanks to @NLnetFDN and @NGIassure for their support.

#infosec #infosecurity #CyberSec #audits #hackingtools #cybersecurity #tls #VPN

https://t.co/2E0QQWtF9E

[CryptoLyzer @CryptoLyzer]

Version 0.8.5 has already been released with #browser (@googlechrome, @mozilla @firefox, @opera) #simulation to check #compatibility.

#infosec #infosecurity #CyberSec #audits #hackingtools #cybersecurity #HTTPS #TLS

https://t.co/vHSePOQNNy

[CryptoLyzer @CryptoLyzer]

Released version 0.8.4 with #MySQL support. Added config-based #vulnerability checker (#DHEat/#DROWN/#FREAK/#Logjam/#Lucky13/#Sweet32 #attack, anon/export/NULL/#RC4 ciphers, early versions) for #TLS.
#infosec #infosecurity #CyberSec #audits #hackingtools
https://t.co/qjL3CebDb6

[CryptoLyzer @CryptoLyzer]

Version 0.8.3 was released with #RDP hybrid mode support.

#infosec #infosecurity #CyberSec #audits #hackingtools

https://t.co/btOCipfWWt

[CryptoLyzer @CryptoLyzer]

Version 0.8.2 released with #SSH certificate support. Added #HASSH tag generation for clients/servers. #TLS Diffie-Hellman analysis now supports RFC7919 and recognizes app. server built-in DH params. Analyzers log now. #infosecurity #auditing #infosec
https://t.co/lqNCCox6P2

[CryptoLyzer @CryptoLyzer]

Version 0.8.1 has been released. #JA3 tag generation support added for several application layer protocols which use opportunistic TLS (#NNTP,#SMTP,#LMTP, #POP3,#FTP,#Sieve,#PostgreSQL,#LDAP).
https://t.co/3GFuQia8eV
#CyberSecurity #infosecurity #Security #auditing #monitoring

[CryptoLyzer @CryptoLyzer]

@CryptoLyzer is on #Python Awesome!

https://t.co/8Tifs1CvtY

[CryptoLyzer @CryptoLyzer]

Version 0.8.0 has been released! #SSH host keys are listed now with their hashes known hosts values, and the software version is recognized in the case of notable vendors.
https://t.co/FLuoqI8aRR
#CyberSecurity #infosecurity #Hacking #hacker #Security #hardening #auditing

[Szilárd Pfeiffer @pfeifferszilard]

The blog post is about the current and planned features of @CryptoLyzer compared with #SaaS and #opensource competitors, such as @ssllab, @Mozilla Observatory, #SSLyze, https://t.co/vWHas48Eq1
https://t.co/QQteExQin3
#CyberSecurity #Hacking #Hackers #PenTest #Pentesting #infosec