24 lines
505 B
YAML
24 lines
505 B
YAML
|
id: mismatched-ssl-certificate
|
||
|
|
|
||
|
|
info:
|
||
|
|
name: Mismatched SSL Certificate
|
||
|
|
author: pdteam
|
||
|
|
severity: low
|
||
|
|
reference:
|
||
|
|
- https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/ssl-certificate-name-hostname-mismatch/
|
||
|
|
tags: ssl,mismatched,tls
|
||
|
|
|
||
|
|
ssl:
|
||
|
|
- address: "{{Host}}:{{Port}}"
|
||
|
|
|
||
|
|
matchers:
|
||
|
|
- type: dsl
|
||
|
|
dsl:
|
||
|
|
- "mismatched == true"
|
||
|
|
- "ip != host"
|
||
|
|
condition: and
|
||
|
|
|
||
|
|
extractors:
|
||
|
|
- type: dsl
|
||
|
|
dsl:
|
||
|
|
- '"CN: " + subject_cn'
|