Update and rename weak-cipher-suite-detect.yaml to weak-cipher-suites.yaml
parent
2d98992ef0
commit
4f22224917
|
@ -1,6 +1,6 @@
|
|||
id: weak-cipher-suite-detect
|
||||
id: weak-cipher-suites
|
||||
info:
|
||||
name: Weak Cipher Suite Detection
|
||||
name: Weak Cipher Suites Detection
|
||||
author: pussycat0x
|
||||
severity: low
|
||||
reference:
|
||||
|
@ -8,13 +8,16 @@ info:
|
|||
description:
|
||||
A weak cipher is defined as an encryption/decryption algorithm that uses a key of insufficient length. Using an insufficient length for a key
|
||||
in an encryption/decryption algorithm opens up the possibility (or probability) that the encryption scheme could be broken.
|
||||
tags: ssl
|
||||
tags: ssl,tls,misconfig
|
||||
|
||||
ssl:
|
||||
- address: "{{Host}}:{{Port}}"
|
||||
|
||||
extractors:
|
||||
- type: json
|
||||
json:
|
||||
- '.cipher'
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
part: cipher
|
||||
|
@ -215,3 +218,4 @@ ssl:
|
|||
- "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256"
|
||||
- "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256"
|
||||
- "TLS_KRB5_WITH_IDEA_CBC_SHA"
|
||||
condition: or
|
Loading…
Reference in New Issue