nuclei-templates/network/detection/starttls-mail-detect.yaml

id: starttls-mail-detect

info:
  name: STARTTLS Mail Server Detection
  author: r3dg33k,userdehghani
  severity: info
  description: |
    STARTTLS is an email protocol command that tells an email server that an email client, including an email client running in a web browser, wants to turn an existing insecure connection into a secure one.
  metadata:
    max-request: 1
  tags: mail,starttls,network,detect,smtp,detection,tcp

tcp:
  - inputs:
      - data: "65686c6f20636865636b746c730a"
        type: hex
    read-size: 2048

    host:
      - "{{Hostname}}"
    port: 25,2525,465,587

    matchers:
      - type: word
        words:
          - "250-STARTTLS"
# digest: 490a0046304402204b37a4e9c400baa603d1d777d160eeac4279601a3e981276b0f7e88d3c7a5a9002201a10d9786927c13bff604166197c57dacebb893e3766af579a7bdcb41c6ebcc8:922c64590222798bb761d5b6d8e72950
Added more templates 2021-06-28 11:13:01 +00:00			`id: starttls-mail-detect`

			`info:`
Update and rename network/starttls-mail-detect.yaml to network/detection/starttls-mail-detect.yaml 2022-09-20 07:46:33 +00:00			`name: STARTTLS Mail Server Detection`
Update missing smtp ports 2024-05-26 20:12:47 +00:00			`author: r3dg33k,userdehghani`
Added more templates 2021-06-28 11:13:01 +00:00			`severity: info`
Update starttls-mail-detect.yaml 2022-08-16 16:25:59 +00:00			`description: \|`
			`STARTTLS is an email protocol command that tells an email server that an email client, including an email client running in a web browser, wants to turn an existing insecure connection into a secure one.`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
TemplateMan Update [Fri Jun 7 10:04:28 UTC 2024] :robot: 2024-06-07 10:04:29 +00:00			`max-request: 1`
			`tags: mail,starttls,network,detect,smtp,detection,tcp`
Added more templates 2021-06-28 11:13:01 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`tcp:`
Added more templates 2021-06-28 11:13:01 +00:00			`- inputs:`
			`- data: "65686c6f20636865636b746c730a"`
			`type: hex`
Fixing errors in templates Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84 2021-08-27 07:43:24 +00:00			`read-size: 2048`
Added more templates 2021-06-28 11:13:01 +00:00
			`host:`
			`- "{{Hostname}}"`
Update missing smtp ports 2024-05-26 20:12:47 +00:00			`port: 25,2525,465,587`
Added more templates 2021-06-28 11:13:01 +00:00
			`matchers:`
			`- type: word`
			`words:`
			`- "250-STARTTLS"`
Auto Template Signing [Sat Jun 8 16:02:16 UTC 2024] :robot: 2024-06-08 16:02:17 +00:00			`# digest: 490a0046304402204b37a4e9c400baa603d1d777d160eeac4279601a3e981276b0f7e88d3c7a5a9002201a10d9786927c13bff604166197c57dacebb893e3766af579a7bdcb41c6ebcc8:922c64590222798bb761d5b6d8e72950`