id: apache-activemq-detect
info:
name: Apache ActiveMQ Detection
author: pussycat0x
severity: info
description: |
Apache ActiveMQ is an open source message broker written in Java together with a full Java Message Service client. It provides "Enterprise Features" which in this case means fostering the communication from more than one client or server.
metadata:
max-request: 1
shodan-query: product:"Apache ActiveMQ"
verified: true
tags: network,activemq,oss,detect,apache
tcp:
- inputs:
- data: "HELP\n\n\u0000"
host:
- "{{Hostname}}"
port: 61613
matchers-condition: and
matchers:
- type: word
words:
- "Unknown STOMP action"
- "norg.apache.activemq.transport.stomp"
# digest: 490a00463044022033fe5150c7014f8708898bc413ba6b34a25fbe05eb62a95949dced8517b3fb97022025e014d08d8ae2f1c85aaced79e66f3da695214f8a893a354cef418ced51ba90:922c64590222798bb761d5b6d8e72950