nuclei-templates/javascript/detection/oracle-tns-listner.yaml

id: oracle-tns-listener
info:
  name: Oracle TNS Listener - Detect
  author: pussycat0x
  severity: info
  description: |
    Oracle clients communicate with the database using the Transparent Network Substrate (TNS) protocol. When the listener receives a connection request (tcp port 1521, by default), it starts up a new database process and establishes a connection between the client and the database.
  reference:
    - https://www.tenable.com/plugins/nessus/110053
  metadata:
    max-request: 1
    shodan-query: product:"Oracle TNS Listener"
    verified: true
  tags: js,oracle,tns,network

javascript:
  - code: |
      var m = require("nuclei/oracle");
      var c = m.OracleClient();
      var response = c.IsOracle(Host, Port);
      to_json(response);

    args:
      Host: "{{Host}}"
      Port: "1521"

    extractors:
      - type: regex
        name: Version
        regex:
          - 'Oracle TNS Listener Version:([0-9.]+)'
# digest: 4a0a00473045022100dc6c882c8ac279ea35bc8ce8df4f5ad7fb8974546fe857d78b33051f8d35b94c022001a23be0ee0813f77cd0a39bd99a4a79f8033deb2426469081b4961864782e72:922c64590222798bb761d5b6d8e72950