2023-03-09 21:35:22 +00:00
|
|
|
id: mismatched-ssl-certificate
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Mismatched SSL Certificate
|
|
|
|
|
author: pdteam
|
|
|
|
|
severity: low
|
|
|
|
|
reference:
|
|
|
|
|
- https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/ssl-certificate-name-hostname-mismatch/
|
|
|
|
|
tags: ssl,mismatched,tls
|
2023-04-28 08:11:21 +00:00
|
|
|
metadata:
|
|
|
|
|
max-request: 1
|
2023-03-09 21:35:22 +00:00
|
|
|
|
|
|
|
|
ssl:
|
|
|
|
|
- address: "{{Host}}:{{Port}}"
|
|
|
|
|
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- "mismatched == true"
|
|
|
|
|
- "ip != host"
|
|
|
|
|
condition: and
|
|
|
|
|
|
|
|
|
|
extractors:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
|
|
|
|
- '"CN: " + subject_cn'
|
