mass-ssl-test.rb

#!/usr/bin/env ruby

#
# By: Erwan Le Rousseau (RandomStorm)
#

require 'terminal-table'
require 'ruby-progressbar'

ssl_test_bin =  ARGV[1] || File.expand_path(File.dirname(__FILE__) + '/SSLTest.jar')
beast = %r{BEAST status: vulnerable}i
crime = %r{CRIME status: vulnerable}i
sslv2 = %r{SSLv2}
rc4   = %r{RC4_}
cn    = %r{CN=([^,\n]+)}
ciphers_min = %r{Minimal encryption strength:\s+([^\n]+)\n}
ciphers_max = %r{Achievable encryption strength:\s+([^\n]+)\n}
error = %r{No SSL/TLS server at}i

def get_cipher_strength(output)
  if output =~ /no encryption/
    strength = '0 bit'
  else
    strength = output[/[^\(]+\(([^\)]+)\)/, 1]
  end
  strength
end

if file = ARGV[0]
  if File.exists?(ssl_test_bin)
    begin
      rows     = []
      targets  = File.readlines(file)
      headings = ['Target', 'CN', 'SSLv2', 'Ciphers Strength (min - achievable)', 'BEAST', 'CRIME', 'RC4']
      bar      = ProgressBar.create(:format => '%a <%B> (%c / %C) %P%% %e', :total => targets.size)
      
      targets.flatten.uniq.each do |target|
        target.chomp!

        row     = [target]
        command = %x{java -jar #{ssl_test_bin} #{target}}

        if command.match(error)
          row << { :value => 'Error: ' + command, :colspan => 6 }
        elsif command.empty?
          row << { :value => 'Error: Empty Response (might be a java exception)', :colspan => 6 }
        else
          row << command[cn, 1]
          row << (command.match(sslv2) ? 'Yes' : 'No')
          row << (get_cipher_strength(command[ciphers_min, 1]) + ' - ' + get_cipher_strength(command[ciphers_max, 1]))
          row << (command.match(beast) ? 'Yes' : 'No')
          row << (command.match(crime) ? 'Yes' : 'No')
          row << (command.match(rc4) ? 'Yes' : 'No')
        end

        rows << row
        bar.progress += 1
      end
    ensure
      puts
      puts Terminal::Table.new(:headings => headings, :rows => rows).to_s
      puts
    end
  else
    puts "The file #{ssl_test_bin} does not exist"
  end
else
  puts 'Usage: ./mass-ssl-test.rb targets.txt [/path/to/SSLTest.jar]'
  puts ' If the path to SSLTest.jar is not supllied, SSLTest.jar must be in the current directory'
  puts ' Targets format is the same than SSLTest.jar : IP/servername [port]'
end