Added Initial SSL Templates (#3339)

2021-12-15 20:43:36 +05:30 · 2021-12-15 20:43:36 +05:30 · 5be1bc1ae7
parent 9c169bd682
commit 5be1bc1ae7
3 changed files with 44 additions and 0 deletions
--- a/ssl/expired-ssl.yaml
+++ b/ssl/expired-ssl.yaml
@ -0,0 +1,14 @@
+id: expired-ssl
+
+info:
+  name: Expired SSL Certificate
+  author: pdteam
+  severity: low
+  tags: ssl
+
+ssl:
+  - address: "{{Host}}:{{Port}}"
+    matchers:
+      - type: dsl
+        dsl:
+          - "unixtime() > not_after"
--- a/ssl/ssl-dns-names.yaml
+++ b/ssl/ssl-dns-names.yaml
@ -0,0 +1,15 @@
+id: ssl-dns-names
+
+info:
+  name: SSL DNS Names
+  author: pdteam
+  severity: info
+  tags: ssl
+
+ssl:
+  - address: "{{Host}}:{{Port}}"
+
+    extractors:
+      - type: json
+        json:
+          - " .dns_names[]"
--- a/ssl/tls-version.yaml
+++ b/ssl/tls-version.yaml
@ -0,0 +1,15 @@
+id: tls-version
+
+info:
+  name: TLS Version
+  author: pdteam
+  severity: info
+  tags: ssl
+
+ssl:
+  - address: "{{Host}}:{{Port}}"
+
+    extractors:
+      - type: json
+        json:
+          - " .tls_version"