22 lines
1.0 KiB
YAML
22 lines
1.0 KiB
YAML
id: untrusted-root-certificate
|
|
|
|
info:
|
|
name: Untrusted Root Certificate - Detect
|
|
author: pussycat0x
|
|
severity: low
|
|
description: |
|
|
A root certificate is a digital certificate issued by a trusted certificate authority that acts as a basis for other digital certificates. An untrusted root certificate is a certificate that is issued by an authority that is not trusted by the computer, and therefore cannot be used to authenticate websites or other digital certificates.
|
|
reference:
|
|
- https://www.sslmarket.com/ssl/trusted-and-untrusted-certificate
|
|
- https://www.invicti.com/web-vulnerability-scanner/vulnerabilities/ssl-untrusted-root-certificate/
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
tags: ssl,untrusted,tls
|
|
ssl:
|
|
- address: "{{Host}}:{{Port}}"
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- "untrusted == true"
|
|
# digest: 490a00463044022016cb7636b9d7409033bcaab802a5b0f8ce08760880f7951bfa43e2ccfb8ca1fb02202938f0da37aa41a60fe943444a089bbd25530480929bad615b1c0e72ef599f80:922c64590222798bb761d5b6d8e72950 |