Quick Start

This guide reviews multiple options for configuring your scans, optimizing your performance, and viewing your data. However, for those users who want to quickly begin scanning, below are the most common scan configurations with the simplest output options.

Remote Scanning

Scan external network infrastructure by connecting to remote hosts via TLS/SSL and SSH protocols. Ideal for network security assessments, external certificate monitoring, and infrastructure audits. Supports CIDR ranges, port ranges, wildcard domain enumeration, and bulk host scanning.

Windows POWERSHELL:

# Basic remote scan
.\certscanner-windows-amd64.exe -license-key "TYCHON-..." -host example.com

# With cipher enumeration
.\certscanner-windows-amd64.exe -license-key "TYCHON-..." -host example.com -cipherscanquick

# Multiple hosts and ports
.\certscanner-windows-amd64.exe -license-key "TYCHON-..." -host example.com,google.com -ports 443,22,8443

# Wildcard domain enumeration
.\certscanner-windows-amd64.exe -license-key "TYCHON-..." -host "*.company.com" -ports 443

Linux BASH:

# Basic remote scan
./certscanner-linux-x64 -license-key "TYCHON-..." -host example.com

# With cipher enumeration
./certscanner-linux-x64 -license-key "TYCHON-..." -host example.com -cipherscanquick

# Multiple hosts and ports
./certscanner-linux-x64 -license-key "TYCHON-..." -host example.com,google.com -ports 443,22,8443

# Wildcard domain enumeration
./certscanner-linux-x64 -license-key "TYCHON-..." -host "*.company.com" -ports 443

macOS BASH:

# Basic remote scan (Intel)
./certscanner-darwin-amd64 -license-key "TYCHON-..." -host example.com

# Basic remote scan (Apple Silicon)
./certscanner-darwin-arm64 -license-key "TYCHON-..." -host example.com

# With cipher enumeration
./certscanner-darwin-amd64 -license-key "TYCHON-..." -host example.com -cipherscanquick

# Multiple hosts and ports
./certscanner-darwin-amd64 -license-key "TYCHON-..." -host example.com,google.com -ports 443,22,8443

# Wildcard domain enumeration
./certscanner-darwin-amd64 -license-key "TYCHON-..." -host "*.company.com" -ports 443

Local Scanning

Analyze the local system for cryptographic assets including filesystem certificates, running process memory, active network connections, and Outlook archives. Perfect for endpoint compliance validation, incident response, and comprehensive system crypto inventory.

Windows POWERSHELL:

# Basic local scan
.\certscanner-windows-amd64.exe -license-key "TYCHON-..." -mode local

# Comprehensive local scan (single flag)
.\certscanner-windows-amd64.exe -license-key "TYCHON-..." -mode local -fullscan

# Alternative: Manual comprehensive scan
.\certscanner-windows-amd64.exe -license-key "TYCHON-..." -mode local -scanfilesystem -scanmemory -scanconnected -scanoutlookarchives

# VPN & IPSec Detection
.\certscanner-windows-amd64.exe -license-key "TYCHON-..." -mode local -detect-vpn-clients -detect-ipsec

Linux BASH:

# Basic local scan
./certscanner-linux-x64 -license-key "TYCHON-..." -mode local

# Comprehensive local scan (single flag)
./certscanner-linux-x64 -license-key "TYCHON-..." -mode local -fullscan

# Alternative: Manual comprehensive scan
./certscanner-linux-x64 -license-key "TYCHON-..." -mode local -scanfilesystem -scanmemory -scanconnected -scanoutlookarchives

# VPN & IPSec Detection
./certscanner-linux-x64 -license-key "TYCHON-..." -mode local -detect-vpn-clients -detect-ipsec

macOS BASH:

# Basic local scan (Intel)
./certscanner-darwin-amd64 -license-key "TYCHON-..." -mode local

# Basic local scan (Apple Silicon)
./certscanner-darwin-arm64 -license-key "TYCHON-..." -mode local

# Comprehensive local scan (single flag)
./certscanner-darwin-amd64 -license-key "TYCHON-..." -mode local -fullscan

# Alternative: Manual comprehensive scan
./certscanner-darwin-amd64 -license-key "TYCHON-..." -mode local -scanfilesystem -scanmemory -scanconnected -scanoutlookarchives

# VPN & IPSec Detection
./certscanner-darwin-amd64 -license-key "TYCHON-..." -mode local -detect-vpn-clients -detect-ipsec