Tlsx

Fast TLS/SSL scanner by ProjectDiscovery for certificate enumeration and cipher detection

Recon & OSINT10 commands

#tls#ssl#certificate#projectdiscovery#recon#enumeration

Installation

1Install using Go

2Verify installation

# Using Go
go install github.com/projectdiscovery/tlsx/cmd/tlsx@latest

# Verify
tlsx --version

Basic Usage

Enumerate TLS/SSL certificates and cipher information from targets

# Scan single domain
tlsx -u https://example.com

# Scan multiple domains from file
tlsx -l domains.txt

# Show certificate details
tlsx -u example.com -san -cn

# TLS version and cipher info
tlsx -u example.com -tls-version -cipher

# JSON output
tlsx -l domains.txt -json -o results.json

# Scan specific ports
tlsx -u example.com -port 443,8443

Command Reference

10 commands

1Target URL or domain

-u

2File containing domains

-l

3Show Subject Alternative Names

-san

4Show Common Name

-cn

5Show TLS version supported

-tls-version

6Show cipher suites

-cipher

7JSON output format

-json

8Output file

-o

9Port to connect on

-port

10Silent mode

-silent

When to Use

SSL/TLS certificate enumeration during recon

Checking for certificate transparency issues

Discovering subdomains via SAN entries

Auditing TLS configuration and cipher strength

Finding expired or misconfigured certificates

Notes & Tips

Part of the ProjectDiscovery toolkit

Can discover hidden subdomains via SAN fields

Use -json for machine-readable output

Supports both IPv4 and IPv6 targets

Common Errors & Solutions

Connection refused

Verify the host and port are reachable and TLS is enabled

No certificates found

Ensure the target supports TLS on the specified port

# Scan single domain tlsx -u https://example.com # Scan multiple domains from file tlsx -l domains.txt # Show certificate details tlsx -u example.com -san -cn # TLS version and cipher info tlsx -u example.com -tls-version -cipher # JSON output tlsx -l domains.txt -json -o results.json # Scan specific ports tlsx -u example.com -port 443,8443