2021-06-28 11:13:01 +00:00
id : starttls-mail-detect
info :
2022-09-20 07:46:33 +00:00
name : STARTTLS Mail Server Detection
2021-06-28 11:13:01 +00:00
author : r3dg33k
severity : info
tags : mail,starttls,network
2022-08-16 16:25:59 +00:00
description : |
STARTTLS is an email protocol command that tells an email server that an email client, including an email client running in a web browser, wants to turn an existing insecure connection into a secure one.
2023-04-28 08:11:21 +00:00
metadata :
max-request : 2
2021-06-28 11:13:01 +00:00
2023-04-27 04:28:59 +00:00
tcp :
2021-06-28 11:13:01 +00:00
- inputs :
- data : "65686c6f20636865636b746c730a"
type : hex
2021-08-27 07:43:24 +00:00
read-size : 2048
2021-06-28 11:13:01 +00:00
host :
- "{{Hostname}}"
2021-12-09 13:06:24 +00:00
- "{{Host}}:25"
2021-06-28 11:13:01 +00:00
matchers :
- type : word
words :
- "250-STARTTLS"