POC Details: 25a903282f1e4cdcc9f7adedcb29d61b27a67c73

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/weak-hsts-detect.yaml

Associated Vulnerability

Likely 0-day

Description

Detected HTTP Strict-Transport-Security header with a weak max-age value (less than one year). A low max-age reduces the effectiveness of HSTS, leaving users vulnerable to protocol downgrade attacks and cookie hijacking during the gap period.

File Snapshot


 id: weak-hsts-detect

info:
  name: Weak HTTP Strict-Transport-Security - Detect
  author: saint_ori

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.