skills.rest
wgpsec
wgpsecOFFICIAL
Explore all skills by this author →
Website𝕏@wgpsecGitHub

tlsx-probe

Extract TLS certificates, cipher suites, and JARM fingerprints from target hosts.

1.7k|238|Updated Dec 7, 2019
Search Tags:#reconnaissance#TLS#projectdiscovery#SSL certificate#JARM#tlsx#cipher suite
One-click install
npx skills add https://github.com/wgpsec/AboutSecurity --skill tlsx-probe
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: tlsx-probe
Source: https://github.com/wgpsec/AboutSecurity/tree/main/skills/tool/tlsx-probe
Command: npx skills add https://github.com/wgpsec/AboutSecurity --skill tlsx-probe

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Manually auditing SSL/TLS configurations across many hosts is slow and error-prone. This Skill automates TLS certificate extraction, version and cipher detection, and misconfiguration checks using the tlsx probe tool from ProjectDiscovery.

Core Features & Use Cases

  • Certificate Extraction: Pull SAN, CN, and subject organization fields from TLS certificates on single hosts or bulk target lists.
  • Misconfiguration Detection: Identify expired, self-signed, mismatched, revoked, and untrusted certificates in one scan.
  • Fingerprinting & Pipeline Integration: Compute JARM/JA3 fingerprints and chain tlsx with subfinder or naabu for subdomain-to-certificate reconnaissance workflows.
  • Use Case: During external reconnaissance, pipe discovered subdomains into tlsx to harvest SAN entries, revealing additional in-scope hostnames and flagging certificates nearing expiration.

Quick Start

Ask the AI to run tlsx against a target domain to extract its certificate SAN and CN fields along with the JARM fingerprint.

Frequently Asked Questions about tlsx-probe

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract TLS certificate information from a domain?▼

Pipe the target domain into tlsx with the -san and -cn flags to extract Subject Alternative Names and Common Names. Add -so for subject organization and -json for structured output suitable for further processing.

How to detect expired or self-signed SSL certificates in bulk?▼

Run tlsx with a host list file using -l hosts.txt combined with the -ex (expired), -ss (self-signed), -mm (mismatched), -re (revoked), and -un (untrusted) flags. The -silent flag keeps output clean for scripting.

Can tlsx discover subdomains from TLS certificates?▼

Yes, tlsx extracts SAN entries from certificates, which often contain additional subdomains. Pipe the output with -san -resp-only through sort -u to build a deduplicated hostname list from certificate data.

Does tlsx support JARM and JA3 fingerprinting?▼

tlsx supports JARM fingerprinting via the -jarm flag, which identifies TLS server configurations useful for clustering and threat hunting. JA3-related fingerprinting is referenced in the skill metadata for TLS client/server identification scenarios.

How do I combine tlsx with subfinder or naabu?▼

Pipe subfinder output directly into tlsx to collect certificates from all discovered subdomains, or pipe naabu port scan results into tlsx to probe TLS on specific ports like 443 and 8443. Both tools use silent output modes compatible with chaining.

Related Skills

Explore More Software Engineering Skills→
narlyseorgnarlyseorg
6

recon-and-enumeration

Automate reconnaissance and enumeration of endpoints, services, and technologies.

Community
Advanced
SkobynSkobyn

hunt-aspnet

Discover and exploit ASP.NET-specific vulnerabilities in web applications.

Community
Advanced
ArianHobson333ArianHobson333
7

tls-certificate-analysis

Extracts TLS certificate metadata, issuer, SANs, and JARM fingerprints.

Community
Advanced
bpnrockstarbpnrockstar

hunt-tls-network

Audit TLS/SSL and DNS configurations for misconfigurations and email spoofing vulnerabilities.

Community
Advanced