From 4f22224917592b34920a2076a249e11546871c91 Mon Sep 17 00:00:00 2001 From: Prince Chaddha Date: Tue, 18 Oct 2022 11:51:36 +0530 Subject: [PATCH] Update and rename weak-cipher-suite-detect.yaml to weak-cipher-suites.yaml --- ...ipher-suite-detect.yaml => weak-cipher-suites.yaml} | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) rename ssl/{weak-cipher-suite-detect.yaml => weak-cipher-suites.yaml} (96%) diff --git a/ssl/weak-cipher-suite-detect.yaml b/ssl/weak-cipher-suites.yaml similarity index 96% rename from ssl/weak-cipher-suite-detect.yaml rename to ssl/weak-cipher-suites.yaml index e60884f932..d2222869fa 100644 --- a/ssl/weak-cipher-suite-detect.yaml +++ b/ssl/weak-cipher-suites.yaml @@ -1,6 +1,6 @@ -id: weak-cipher-suite-detect +id: weak-cipher-suites info: - name: Weak Cipher Suite Detection + name: Weak Cipher Suites Detection author: pussycat0x severity: low reference: @@ -8,13 +8,16 @@ info: description: A weak cipher is defined as an encryption/decryption algorithm that uses a key of insufficient length. Using an insufficient length for a key in an encryption/decryption algorithm opens up the possibility (or probability) that the encryption scheme could be broken. - tags: ssl + tags: ssl,tls,misconfig + ssl: - address: "{{Host}}:{{Port}}" + extractors: - type: json json: - '.cipher' + matchers: - type: word part: cipher @@ -215,3 +218,4 @@ ssl: - "TLS_DH_RSA_WITH_ARIA_128_GCM_SHA256" - "TLS_ECDH_RSA_WITH_ARIA_128_GCM_SHA256" - "TLS_KRB5_WITH_IDEA_CBC_SHA" + condition: or