ShadowTrackr

Log in >
RSS feed

More cipher fields in certifcates

06 May 2024
Again some new fields are added to certificates:

- cipherorder_sslv3
- cipherorder_tlsv1
- cipherorder_tlsv1_1
- cipherorder_tlsv1_2
- cipherorder_tlsv1_3

You can use these to build queries like this one, which finds all certificates on servers that still support RC4 ciphers:

index=certificates cipherorder_sslv3=*RC4* OR
cipherorder_tlsv1=*RC4* OR cipherorder_tlsv1_1=*RC4* OR 
cipherorder_tlsv1_2=*RC4* OR cipherorder_tlsv1_3=*RC4*
Older posts >

Resources
API
Blog
Documentation
Integrations
Shodan
OpenCTI