How can i detecte a poodle vulnarabitiy and other ssl attacks using a TLSx ?

[themeswordpress]

How can i detecte a poodle vulnarabitiy and other ssl attacks using a TLSx ?

if can't using tlsx ,do you have any other toold can help me for this goal ?

[dogancanbakir]

This discussion closed automatically due to inactivity. Feel free to reopen or start new if still relevant.

[bad-antics]

tlsx can help detect POODLE and other SSL/TLS vulnerabilities, but it's a TLS scanner, not a vulnerability scanner — you need to check the cipher suites and protocol versions it reports.

Detecting POODLE (CVE-2014-3566):

POODLE exploits SSLv3 with CBC ciphers. Check if SSLv3 is enabled:

echo "target.com" | tlsx -ssl -tls-version

If SSLv3 is listed → vulnerable to POODLE.

Detecting weak configurations:

# Check all supported TLS versions and ciphers
echo "target.com" | tlsx -ce -tv -json | jq '{host: .host, versions: .tls_version, ciphers: .cipher}'

# Specifically check for weak/deprecated protocols
echo "target.com" | tlsx -min-version ssl30 -max-version tls10

# Check for specific weak ciphers
echo "target.com" | tlsx -ce -json | jq '.cipher_enum[] | select(contains("RC4") or contains("DES") or contains("CBC") or contains("NULL"))'

Common SSL/TLS attacks to check for:

Attack	What to check with tlsx
POODLE	SSLv3 enabled: tlsx -ssl
BEAST	TLS 1.0 + CBC ciphers: tlsx -ce -tv
SWEET32	3DES ciphers: check for DES-CBC3 in -ce output
FREAK	Export ciphers: check for EXPORT in -ce output
Logjam	Weak DH: check for DHE_EXPORT
CRIME	TLS compression: not directly testable with tlsx

Better tools for full SSL vuln scanning:

• testssl.sh — the gold standard for SSL/TLS vulnerability testing
• sslyze — Python-based, checks POODLE, Heartbleed, ROBOT, etc.
• nuclei with SSL templates: nuclei -u https://target.com -tags ssl,tls

# testssl.sh example
testssl.sh --poodle --beast --freak --sweet32 target.com

# sslyze
sslyze target.com --sslv3 --heartbleed --robot

tlsx is great for enumeration (what ciphers/versions does the target support), but for vulnerability assessment, use testssl.sh or nuclei SSL templates.