Projects/O-Saft

This project is part of the OWASP Defenders community. Feel free to browse other projects within the Defenders, Builders, and Breakers communities.

PROJECT INFO What does this OWASP project offer you?

RELEASE(S) INFO What releases are available for this project?

what is this project? Name: O-Saft (home page) Purpose: This tools lists information about remote target's SSL certificate and tests the remote target's SSL connection according given list of ciphers and various SSL configurations. O-Saft - OWASP SSL audit for testers The main idea is to have a tool which works on common platforms and can simply be automated. In a Nutshell show SSL connection details show certificate details check for supported ciphers check for ciphers provided in your own libssl.so and libcrypt.so check for special HTTP(S) support (like SNI, HSTS, certificate pinning) may check for a single attribute may check multiple targets at once can be scripted (headless or as CGI) should work on any platform (just needs perl, openssl optional) scoring for all checks (still to be improved in many ways ;-) output format can be cutomized various trace and debug options to hunt unusual connection problems License: GPL v2 who is working on this project? Project Leader(s): Achim @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: View Main links: Repository https://github.com/OWASP/O-Saft Unpack o-saft.tgz and start: o-saft --help Key Contacts Contact Achim @ to contribute to this project Contact Achim @ to review or sponsor this project

current release Not Yet Published last reviewed release Not Yet Reviewed other releases

current release
O-Saft 13.03.13 - 03/2013 - (download) Release Leader: Achim @ Release details: N/A : Rating: Not Reviewed To be reviewed under Assessment Criteria v2.0