Detect hosts using deprecated versions of SSL/TLS. (projectdiscovery#…

…3680) * Add template * Fix linter error * misc updates Co-authored-by: sandeep <[email protected]>
xiaodan11 · Feb 9, 2022 · b8cc4d5 · b8cc4d5
1 parent 4cf3791
commit b8cc4d5
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/ssl/deprecated-tls.yaml b/ssl/deprecated-tls.yaml
@@ -0,0 +1,20 @@
+id: deprecated-tls
+
+info:
+  name: Deprecated TLS Detection (inferior to TLS 1.2)
+  author: righettod
+  severity: info
+  reference: https://ssl-config.mozilla.org/#config=intermediate
+  metadata:
+    shodan-query: ssl.version:sslv2 ssl.version:sslv3 ssl.version:tlsv1 ssl.version:tlsv1.1
+  tags: ssl
+
+ssl:
+  - address: "{{Host}}:{{Port}}"
+    min_version: sslv3
+    max_version: tls11
+
+    extractors:
+      - type: json
+        json:
+          - " .tls_version"