nuclei-templates/network/detection/starttls-mail-detect.yaml

id: starttls-mail-detect

info:
  name: STARTTLS Mail Server Detection
  author: r3dg33k
  severity: info
  description: |
    STARTTLS is an email protocol command that tells an email server that an email client, including an email client running in a web browser, wants to turn an existing insecure connection into a secure one.
  metadata:
    max-request: 1
  tags: mail,starttls,network,detect,smtp

tcp:
  - inputs:
      - data: "65686c6f20636865636b746c730a"
        type: hex
    read-size: 2048

    host:
      - "{{Hostname}}"
    port: 25

    matchers:
      - type: word
        words:
          - "250-STARTTLS"
# digest: 4a0a00473045022100b8e2e6513b9a00666a2ee07a825cbf66e2bb8f4c3198978baa7fcb6b2e68ca5d02202d5e30193d2420cff48017b05dec81fbf711fa2282e008d5fb8eb86da456800e:922c64590222798bb761d5b6d8e72950
Added more templates 2021-06-28 11:13:01 +00:00			`id: starttls-mail-detect`

			`info:`
Update and rename network/starttls-mail-detect.yaml to network/detection/starttls-mail-detect.yaml 2022-09-20 07:46:33 +00:00			`name: STARTTLS Mail Server Detection`
Added more templates 2021-06-28 11:13:01 +00:00			`author: r3dg33k`
			`severity: info`
Update starttls-mail-detect.yaml 2022-08-16 16:25:59 +00:00			`description: \|`
			`STARTTLS is an email protocol command that tells an email server that an email client, including an email client running in a web browser, wants to turn an existing insecure connection into a secure one.`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
TemplateMan Update [Wed Sep 27 13:29:58 UTC 2023] :robot: 2023-09-27 13:29:58 +00:00			`max-request: 1`
tagging updates for SSL & network related templates 2023-12-07 21:57:41 +00:00			`tags: mail,starttls,network,detect,smtp`
Added more templates 2021-06-28 11:13:01 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`tcp:`
Added more templates 2021-06-28 11:13:01 +00:00			`- inputs:`
			`- data: "65686c6f20636865636b746c730a"`
			`type: hex`
Fixing errors in templates Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84 2021-08-27 07:43:24 +00:00			`read-size: 2048`
Added more templates 2021-06-28 11:13:01 +00:00
			`host:`
			`- "{{Hostname}}"`
removed duplicate network request 2023-09-16 19:35:21 +00:00			`port: 25`
Added more templates 2021-06-28 11:13:01 +00:00
			`matchers:`
			`- type: word`
			`words:`
			`- "250-STARTTLS"`
Auto Template Signing [Fri Dec 8 07:58:29 UTC 2023] :robot: 2023-12-08 07:58:29 +00:00			`# digest: 4a0a00473045022100b8e2e6513b9a00666a2ee07a825cbf66e2bb8f4c3198978baa7fcb6b2e68ca5d02202d5e30193d2420cff48017b05dec81fbf711fa2282e008d5fb8eb86da456800e:922c64590222798bb761d5b6d8e72950`