A Python tool for automated scanning and detection of SSL/TLS vulnerabilities like Heartbleed, POODLE, and FREAK.
A2SV is an open-source Python tool that automatically scans servers for known SSL/TLS vulnerabilities. It detects critical security flaws like Heartbleed, POODLE, FREAK, and DROWN attacks, helping organizations identify weaknesses in their encryption implementations before attackers can exploit them.
Security professionals, penetration testers, system administrators, and developers responsible for maintaining secure web servers and applications.
A2SV provides a lightweight, command-line alternative to commercial vulnerability scanners specifically focused on SSL/TLS weaknesses, with modular testing options and support for bulk scanning without complex dependencies.
Auto Scanning to SSL Vulnerability
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Targets specific, high-impact CVEs like Heartbleed and POODLE, allowing precise security checks without unnecessary bloat.
Supports scanning single targets via IP/URL or bulk from files, as demonstrated with the -t and -tf flags in the README.
Enables individual vulnerability testing via the -m flag, providing granular control over scan scope for targeted assessments.
Allows scans on non-standard ports beyond 443, useful for testing servers configured on alternate SSL ports.
Focuses on older CVEs up to 2016, with no mention of newer vulnerabilities like those in TLS 1.3, limiting its relevance for modern threats.
The README explicitly states 'slow support,' indicating infrequent updates and potential reliability issues for ongoing use.
Requires installation of Python packages and OpenSSL via command line, which can be a barrier compared to packaged or containerized tools.