Update weak-cipher-detect.yaml
parent
cfc25efb69
commit
1cd95a8836
|
@ -5,14 +5,14 @@ info:
|
|||
severity: low
|
||||
reference:
|
||||
- https://www.acunetix.com/vulnerabilities/web/tls-ssl-weak-cipher-suites/
|
||||
description: |
|
||||
A weak cipher is defined as an encryption/decryption algorithm that uses a key of insufficient length. Using an insufficient length for a key
|
||||
description:
|
||||
A weak cipher is defined as an encryption/decryption algorithm that uses a key of insufficient length. Using an insufficient length for a key
|
||||
in an encryption/decryption algorithm opens up the possibility (or probability) that the encryption scheme could be broken.
|
||||
tags: ssl
|
||||
ssl:
|
||||
- address: "{{Host}}:{{Port}}"
|
||||
extractors:
|
||||
- type: json
|
||||
- type: json
|
||||
json:
|
||||
- '.cipher'
|
||||
matchers:
|
||||
|
@ -214,4 +214,4 @@ ssl:
|
|||
- "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256"
|
||||
- "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256"
|
||||
- "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256"
|
||||
- "TLS_KRB5_WITH_IDEA_CBC_SHA"
|
||||
- "TLS_KRB5_WITH_IDEA_CBC_SHA"
|
||||
|
|
Loading…
Reference in New Issue