nuclei-templates/javascript/enumeration/rsync/rsync-list-modules.yaml

id: rsync-list-modules

info:
  name: Rsync List Modules - Enumeration
  author: pussycat0x
  severity: low
  description: |
    Lists modules available for rsync (remote file sync) synchronization.
  reference:
    - https://nmap.org/nsedoc/scripts/rsync-list-modules.html
  metadata:
    verified: true
    max-request: 1
    shodan-query: port:873
  tags: network,rsync,enum,js

javascript:
  - pre-condition: |
      isPortOpen(Host,Port);
    code: |
      const c = require("nuclei/net");
      const data = "@RSYNCD: 31.0\n\n"
      const conn = c.Open('tcp', `${Host}:${Port}`);
      conn.Send(data);
      response = conn.RecvFullString(1024)
      const rsyncRegex = /@RSYNCD: EXIT|@RSYNCD: 31.0|@RSYNCD:|@RSYNCD: 30.0/g;
      const resultString = response.replace(rsyncRegex, "");
      const whitespaceRegex = /[\s\t\n]+/g;
      const finalResult = resultString.replace(whitespaceRegex, "  ");
      if (finalResult.trim() === "") {
      exit();
      }
      else{
      finalResult
      }

    args:
      Host: "{{Host}}"
      Port: 873

    matchers:
      - type: word
        negative: true
        words:
          - "HTTP/1.1"

    extractors:
      - type: dsl
        dsl:
          - response
# digest: 490a0046304402206090a0958315649123a7e861812a59815fbce401dd5f14f8f3cd13aec5dd85bb02201db117ee4dc61f18d8713461a3d2a17e12aaa73ca32863e5d7c076cc0e448936:922c64590222798bb761d5b6d8e72950