nuclei-templates/javascript/detection/oracle-tns-listner.yaml

id: oracle-tns-listener
info:
  name: Oracle TNS Listener - Detect
  author: pussycat0x
  severity: info
  description: |
    Oracle clients communicate with the database using the Transparent Network Substrate (TNS) protocol. When the listener receives a connection request (tcp port 1521, by default), it starts up a new database process and establishes a connection between the client and the database.
  reference:
    - https://www.tenable.com/plugins/nessus/110053
  metadata:
    max-request: 1
    shodan-query: product:"Oracle TNS Listener"
    verified: true
  tags: js,oracle,tns,network

javascript:
  - code: |
      var m = require("nuclei/oracle");
      var c = m.OracleClient();
      var response = c.IsOracle(Host, Port);
      to_json(response);

    args:
      Host: "{{Host}}"
      Port: "1521"

    extractors:
      - type: regex
        name: Version
        regex:
          - 'Oracle TNS Listener Version:([0-9.]+)'
# digest: 490a00463044022010c62d399e0c5e8a618e246cefb58f3bb987b492dd839f8020b1d5890e8a955b022009e466dc04ea6955fa566b30f6dc08b498138a6350e1b821db3d33b4de0c7880:922c64590222798bb761d5b6d8e72950