Skip to content

Commit b0011ca

Browse files
authored
Update 9.1.2.yaml
Signed-off-by: AmirHossein Raeisi <[email protected]>
1 parent 8d4374c commit b0011ca

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

templates/9.1.2.yaml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,8 @@ info:
99
reference:
1010
- https://www.acunetix.com/vulnerabilities/web/tls-ssl-weak-cipher-suites/
1111
- https://github.com/projectdiscovery/nuclei-templates/blob/main/ssl/insecure-cipher-suite-detect.yaml
12+
- https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/09-Testing_for_Weak_Cryptography/01-Testing_for_Weak_Transport_Layer_Security
13+
- https://cheatsheetseries.owasp.org/cheatsheets/Transport_Layer_Security_Cheat_Sheet.html
1214
tags: asvs,9.1.2
1315
description: |
1416
Verify using up to date TLS testing tools that only strong cipher suites are enabled, with the strongest cipher suites set as preferred.
@@ -420,4 +422,4 @@ ssl:
420422
- "TLS_KRB5_WITH_3DES_EDE_CBC_MD5"
421423
- "TLS_KRB5_WITH_RC4_128_SHA"
422424
- "TLS_RSA_WITH_NULL_SHA"
423-
condition: or
425+
condition: or

0 commit comments

Comments
 (0)