mismatched ssl detection + ssl template updates (#5256)

* mismatched ssl detection + ssl template updates * misc fix
projectdiscovery · Oct 7, 2022 · ac0b120 · ac0b120
1 parent a5e0f6f
commit ac0b120
Show file tree

Hide file tree

Showing 7 changed files with 29 additions and 21 deletions.
diff --git a/ssl/deprecated-tls.yaml b/ssl/deprecated-tls.yaml
@@ -16,8 +16,8 @@ info:
 
 ssl:
   - address: "{{Host}}:{{Port}}"
-    min_version: sslv3
-    max_version: sslv3
+    min_version: ssl30
+    max_version: ssl30
 
     extractors:
       - type: json

diff --git a/ssl/detect-ssl-issuer.yaml b/ssl/detect-ssl-issuer.yaml
@@ -1,4 +1,4 @@
-id: detect-ssl-issuer
+id: ssl-issuer
 
 info:
   name: Detect SSL Certificate Issuer
@@ -12,4 +12,4 @@ ssl:
     extractors:
       - type: json
         json:
-          - " .issuer_organization[]"
+          - " .issuer_org[]"
diff --git a/ssl/expired-ssl.yaml b/ssl/expired-ssl.yaml
@@ -8,7 +8,13 @@ info:
 
 ssl:
   - address: "{{Host}}:{{Port}}"
+
     matchers:
       - type: dsl
         dsl:
-          - "unixtime() > not_after"
+          - "expired == true"
+
+    extractors:
+      - type: kval
+        kval:
+          - "not_after"
diff --git a/ssl/mismatched-ssl.yaml b/ssl/mismatched-ssl.yaml
@@ -0,0 +1,15 @@
+id: mismatched-ssl
+
+info:
+  name: Mismatched SSL Certificate
+  author: pdteam
+  severity: low
+  tags: ssl
+
+ssl:
+  - address: "{{Host}}:{{Port}}"
+
+    matchers:
+      - type: dsl
+        dsl:
+          - "mismatched == true"
diff --git a/ssl/self-signed-ssl.yaml b/ssl/self-signed-ssl.yaml
@@ -9,20 +9,7 @@ info:
 ssl:
   - address: "{{Host}}:{{Port}}"
 
-    extractors:
-      - type: json
-        name: common_name
-        json:
-          - ".common_name[]"
-        internal: true
-
-      - type: json
-        name: issuer_common_name
-        json:
-          - ".issuer_common_name[]"
-        internal: true
-
     matchers:
       - type: dsl
         dsl:
-          - "common_name == issuer_common_name"
+          - "self_signed == true"
diff --git a/ssl/ssl-dns-names.yaml b/ssl/ssl-dns-names.yaml
@@ -12,4 +12,4 @@ ssl:
     extractors:
       - type: json
         json:
-          - " .dns_names[]"
+          - ".subject_an[]"
diff --git a/ssl/tls-version.yaml b/ssl/tls-version.yaml
@@ -12,4 +12,4 @@ ssl:
     extractors:
       - type: json
         json:
-          - " .tls_version"
+          - ".tls_version"