1

i am testing different SSL-Proxys and want to know more about their failure-handling.

Do you know about an public (test)server (HTTPS) which provides the typical flaws like:

  • Expired certificate
  • Self-signed certificate
  • Multiple Domains (SNI)
  • etc

Edit: An testsuite/tool would be fine too.

p.S. i am not looking for an SSL-testsite like SSLlabs

thank you in advance!

closed as off-topic by RoraΖ, Stephane, schroeder, ThoriumBR, Eric G Apr 13 '15 at 23:00

This question appears to be off-topic. The users who voted to close gave these specific reasons:

If this question can be reworded to fit the rules in the help center, please edit the question.

  • So you're looking for a place that you can use as a target? In general, recommendations for off-site resources are off-topic on Stack Exchange. – S.L. Barth Apr 13 '15 at 11:28
  • Yes, a target, or a tool/testsuite for an dedicatet http-server. Okay, i did not know that such questions are off-topic. Sorry about that! – duese Apr 13 '15 at 11:46
  • 1
    You might want to check tls-o-matic.com – Alasjo Apr 13 '15 at 12:22
  • Thank you very much! tls-o-matic.com is exactly what i was looking for. – duese Apr 13 '15 at 13:23
0

A good general tool to use when testing and learning about pen-testing is Kali Linux. It comes with both test targets and tools. You can use VirtualBox to host it on an existing machine if you don't have another machine to use.

Not the answer you're looking for? Browse other questions tagged or ask your own question.