Mismatched SSL template

[pranav095]

Hello, can someone explain this https://github.com/projectdiscovery/nuclei-templates/blob/master/ssl/mismatched-ssl.yaml
or send any reference for the same.

[olearycrew]

This template looks for a mis-match between the domain the SSL certificate for the domain.

For example:

nuclei -id mismatched-ssl-certificate -u https://boleary.dev

Doesn't return anything because the certificat for boleary.dev is valid for that domain.

However, using https://badssl.com/ and their "wrong host" example, we get a returned value:

nuclei -id mismatched-ssl-certificate -u https://wrong.host.badssl.com/