enum-tls-security

Enumerate TLS protocol versions, cipher suites, and certificate chain validity across network endpoints.

Updated Jul 30, 2026

Search Tags:#security #audit #encryption #cryptography #tls #pentest

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-tls-security

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: enum-tls-security
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/enum-tls-security
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill enum-tls-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the risk of data interception and downgrade attacks by identifying misconfigured TLS endpoints, weak cipher suites, and outdated protocol versions across your infrastructure.

Core Features & Use Cases

Protocol & Cipher Audit: Automatically detects support for insecure protocols like SSL 2.0/3.0 and identifies weak cipher suites that expose data to decryption.
Certificate Validation: Performs comprehensive checks on certificate chains, including expiration, hostname mismatches, and revocation status.
Use Case: Use this skill during a security assessment to verify that all production endpoints enforce modern TLS 1.3 standards and have properly configured HSTS headers.

Quick Start

Use the enum-tls-security skill to audit the transport layer configuration for all hostnames defined in the current scope file.

Frequently Asked Questions about enum-tls-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I audit TLS configurations across my network endpoints?▼

You can audit TLS configurations by enumerating protocol versions, cipher suites, and certificate chain validity across authorized endpoints. This skill performs passive and active TLS handshake analysis to identify misconfigurations and verify transport-layer hardening.

How do I check for weak cipher suites and outdated SSL protocols?▼

Checking for weak cipher suites and outdated SSL protocols involves detecting support for insecure versions like SSL 2.0/3.0. The TLS audit automatically identifies weak cipher suites that expose data to decryption and downgrade attacks.

How do I validate certificate chains for expiration and hostname mismatches?▼

Validating certificate chains requires comprehensive checks on expiration dates, hostname mismatches, and revocation status. The TLS security audit performs these checks to ensure properly configured transport security across your infrastructure.

Do I need authorization to run active TLS handshake analysis on production endpoints?▼

Yes, you need a validated target scope and authorization cache to perform active TLS handshake analysis. This ensures the security assessment only verifies transport-layer compliance against authorized network endpoints.

What's the best way to verify TLS 1.3 enforcement and HSTS headers during a security assessment?▼

Verifying TLS 1.3 enforcement and HSTS headers is best done during a security assessment using a TLS configuration audit. It checks all production endpoints to confirm they enforce modern cryptographic standards and properly configured transport security.

Why does TLS certificate validation fail when auditing multiple network endpoints?▼

TLS certificate validation fails during an audit due to expired certificates, hostname mismatches, or revoked certificate chains. The security assessment identifies these specific misconfigurations across your endpoints to prevent data interception risks.