Description

Detects if a web server refuses to support modern TLS protocols (TLS 1.2 and TLS 1.3). This is a critical security vulnerability since older TLS versions (1.0 and 1.1) have known security weaknesses that can compromise encrypted communications between clients and servers.

Detection Strategy

• Test if the server accepts connections using TLS 1.2 or TLS 1.3 protocols

• Report a vulnerability if the server does not support either TLS 1.2 or TLS 1.3

• During connection attempts, allow any cipher suite to be used to verify protocol support