Update weak-cipher-detect.yaml

patch-1
pussycat0x 2022-10-15 21:22:55 +05:30 committed by GitHub
parent cfc25efb69
commit 1cd95a8836
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions

View File

@ -5,14 +5,14 @@ info:
severity: low
reference:
- https://www.acunetix.com/vulnerabilities/web/tls-ssl-weak-cipher-suites/
description: |
A weak cipher is defined as an encryption/decryption algorithm that uses a key of insufficient length. Using an insufficient length for a key
description:
A weak cipher is defined as an encryption/decryption algorithm that uses a key of insufficient length. Using an insufficient length for a key
in an encryption/decryption algorithm opens up the possibility (or probability) that the encryption scheme could be broken.
tags: ssl
ssl:
- address: "{{Host}}:{{Port}}"
extractors:
- type: json
- type: json
json:
- '.cipher'
matchers:
@ -214,4 +214,4 @@ ssl:
- "TLS_DHE_RSA_WITH_ARIA_128_CBC_SHA256"
- "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256"
- "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256"
- "TLS_KRB5_WITH_IDEA_CBC_SHA"
- "TLS_KRB5_WITH_IDEA_CBC_SHA"