Detect hosts using deprecated versions of SSL/TLS. (#3680)

* Add template

* Fix linter error

* misc updates

Co-authored-by: sandeep <sandeep@projectdiscovery.io>
patch-1
Dominique RIGHETTO 2022-02-09 07:38:17 +01:00 committed by GitHub
parent 4cf3791eb3
commit b8cc4d50be
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 0 deletions

20
ssl/deprecated-tls.yaml Normal file
View File

@ -0,0 +1,20 @@
id: deprecated-tls
info:
name: Deprecated TLS Detection (inferior to TLS 1.2)
author: righettod
severity: info
reference: https://ssl-config.mozilla.org/#config=intermediate
metadata:
shodan-query: ssl.version:sslv2 ssl.version:sslv3 ssl.version:tlsv1 ssl.version:tlsv1.1
tags: ssl
ssl:
- address: "{{Host}}:{{Port}}"
min_version: sslv3
max_version: tls11
extractors:
- type: json
json:
- " .tls_version"