nuclei-templates/network/detection/dotnet-remoting-service-det...

id: dotnet-remoting-service-detect

info:
  name: Microsoft .NET Remoting httpd - Detect
  author: pussycat0x
  severity: info
  description: |
    Microsoft .NET Remoting httpd was detected.
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    max-request: 1
    shodan-query: product:"MS .NET Remoting httpd"
    verified: true
  tags: network,detect,microsoft

tcp:
  - inputs:
      - data: "\n"

    host:
      - "{{Hostname}}"
    port: 8080

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "Server: MS .NET Remoting"

    extractors:
      - type: regex
        regex:
          - ".NET CLR ([0-9.]+)"
# digest: 4a0a00473045022100b12790be64bc8752a000e725872e23e84b9fbca3d5612d78e98376be168bb2c20220127ad78af513a4d34bf2c543ad9ce4783bdfd5fd16a516f2b62140a3400ff54c:922c64590222798bb761d5b6d8e72950
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`id: dotnet-remoting-service-detect`

			`info:`
Enhancement: network/detection/dotnet-remoting-service-detect.yaml by md 2023-03-29 19:15:20 +00:00			`name: Microsoft .NET Remoting httpd - Detect`
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`author: pussycat0x`
			`severity: info`
			`description: \|`
Enhancement: network/detection/dotnet-remoting-service-detect.yaml by md 2023-03-29 19:15:20 +00:00			`Microsoft .NET Remoting httpd was detected.`
			`classification:`
			`cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N`
			`cwe-id: CWE-200`
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`metadata:`
TemplateMan Update [Wed Sep 27 13:29:58 UTC 2023] :robot: 2023-09-27 13:29:58 +00:00			`max-request: 1`
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`shodan-query: product:"MS .NET Remoting httpd"`
TemplateMan Update [Wed Sep 27 13:29:58 UTC 2023] :robot: 2023-09-27 13:29:58 +00:00			`verified: true`
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`tags: network,detect,microsoft`

Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`tcp:`
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`- inputs:`
			`- data: "\n"`
Update dotnet-remoting-service-detect.yaml 2022-11-15 06:13:35 +00:00
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`host:`
			`- "{{Hostname}}"`
removed duplicate network request 2023-09-16 19:35:21 +00:00			`port: 8080`
Update dotnet-remoting-service-detect.yaml 2022-11-15 06:13:35 +00:00
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`matchers-condition: and`
			`matchers:`
			`- type: word`
			`words:`
			`- "Server: MS .NET Remoting"`
Update dotnet-remoting-service-detect.yaml 2022-11-15 06:13:35 +00:00
MS .NET Remoting Detect 2022-11-14 19:50:18 +00:00			`extractors:`
			`- type: regex`
			`regex:`
Update dotnet-remoting-service-detect.yaml 2022-11-14 19:52:40 +00:00			`- ".NET CLR ([0-9.]+)"`
Auto Template Signing [Thu Oct 19 13:13:50 UTC 2023] :robot: 2023-10-19 13:13:52 +00:00			`# digest: 4a0a00473045022100b12790be64bc8752a000e725872e23e84b9fbca3d5612d78e98376be168bb2c20220127ad78af513a4d34bf2c543ad9ce4783bdfd5fd16a516f2b62140a3400ff54c:922c64590222798bb761d5b6d8e72950`