id: apache-activemq-detect
info:
name: Apache ActiveMQ Detection
author: pussycat0x
severity: info
description: |
Apache ActiveMQ is an open source message broker written in Java together with a full Java Message Service client. It provides "Enterprise Features" which in this case means fostering the communication from more than one client or server.
metadata:
max-request: 1
shodan-query: product:"Apache ActiveMQ"
verified: true
tags: network,activemq,oss,detect
tcp:
- inputs:
- data: "HELP\n\n\u0000"
host:
- "{{Hostname}}"
port: 61613
matchers-condition: and
matchers:
- type: word
words:
- "Unknown STOMP action"
- "norg.apache.activemq.transport.stomp"
# digest: 490a0046304402205a1e00700e031d892d182fe809b983499efba09462f08604758a22894b984d3b0220475fac904447a4ce8dd9c26c4e0433661b9610dd9583acb8846bf2d84877086f:922c64590222798bb761d5b6d8e72950