Added self-signed-ssl detection (#4457)

2022-05-20 16:18:49 +05:30 · 2022-05-20 16:18:49 +05:30 · 9d5f78d24c
parent a91cb7cf52
commit 9d5f78d24c
1 changed files with 28 additions and 0 deletions
--- a/ssl/self-signed-ssl.yaml
+++ b/ssl/self-signed-ssl.yaml
@ -0,0 +1,28 @@
+id: self-signed-ssl
+
+info:
+  name: Self Signed SSL Certificate
+  author: righettod,pdteam
+  severity: low
+  tags: ssl
+
+ssl:
+  - address: "{{Host}}:{{Port}}"
+
+    extractors:
+      - type: json
+        name: common_name
+        json:
+          - ".common_name[]"
+        internal: true
+
+      - type: json
+        name: issuer_common_name
+        json:
+          - ".issuer_common_name[]"
+        internal: true
+
+    matchers:
+      - type: dsl
+        dsl:
+          - "common_name == issuer_common_name"