Checking for SSL issues form part of most infrastructure and web application assessments. However, these checks often aren't detailed enough and can miss important issues. This is often due to a perception of being of less importance than other tests and the need to combine manual checks against multiple tools.
This talk will introduce SSLAuditor4/Opabinia, a tool that I have developed to automate SSL checks, making the task easier for the tester, while improving the accuracy and level of output. Opabina will also perform an in-depth assessment of SSL and RDP services irrespective of the size of scope and can be used by administrators to identify expired and expiring certs on their servers.