Skip to content

Scanning Engine v2 - Module - JARM

Overview

Targeting

Schemas

The schema for the body object of all results generated with .task.module_name equal to jarm can be found here. The schema for results is available both in standalone and bundled form.

Examples

These are examples of the .body object for results with .task.module_name equal to jarm.

GitHub

This example was generated with the GitHub website.

{
  "jarm": "c02b|0303|h2|ff01-0000-0001-000b-0010-0017,c02b|0303|h2|ff01-0000-0001-000b-0010-0017,c02b|0303|h2|ff01-0000-0001-000b-0010-0017,|||,c02b|0303||ff01-0000-0001-000b-0017,|||,1301|0303||002b-0033,1301|0303||002b-0033,|||,|||",
  "jarm_hash": "27d27d27d00027d00041d41d000000aa5feb68b57d31b6dc713b6917a988e3",
  "details": {
    "highest_ssl_version_supported": "TLSv1.3",
    "lowest_ssl_version_supported": "TLSv1.2",
    "supported_cipher_suites": [
      "TLS_AES_128_GCM_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256"
    ]
  }
}

Google

This example was generated with the Google website.

{
  "jarm": "c02b|0303|h2|0017-ff01-000b-0023-0010,cca9|0303|h2|0017-ff01-000b-0023-0010,cca9|0303|h2|0017-ff01-000b-0023-0010,c02f|0303||0017-ff01-000b-0023,cca9|0303||0017-ff01-000b-0023,c009|0302|h2|0017-ff01-000b-0023-0010,1302|0303||0033-002b,1303|0303||0033-002b,|||,1303|0303||0033-002b",
  "jarm_hash": "27d40d40d29d40d1dc42d43d00043d4689ee210389f4f6b4b5b1b93f92252d",
  "details": {
    "highest_ssl_version_supported": "TLSv1.3",
    "lowest_ssl_version_supported": "TLSv1.2",
    "supported_cipher_suites": [
      "TLS_AES_256_GCM_SHA384",
      "TLS_CHACHA20_POLY1305_SHA256",
      "TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA",
      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
      "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
    ]
  }
}

Changelog

v1.1.0 (2025-10-16)

  • Fix lowest TLS version detection bug where empty byte arrays (b"") were incorrectly identified as the minimum version due to lexicographic comparison in the min() function. This caused the lowest version field to sometimes be empty instead of showing the actual minimum supported TLS version, leading to "UNRECOGNIZED VERSION" entries in scan results.

v1.0.0 (2025-05-05)

  • Initial release of versioning for each module. All modules are being tagged with version number 1.0.0. Going forward:
  • Major version should be changed when there are changes that impact consumers or clients of the modules.
  • Minor version should be changed when there are additions which enrich or enhance the module but shouldn't affect consumers or clients.
  • Patch version should be changed when there are bugfixes.