nuclei-templates/network/detection/expn-mail-detect.yaml

id: expn-mail-detect

info:
  name: EXPN Mail Server Detect
  author: r3dg33k
  severity: info
  description: |
    The "EXPN" can be used by attackers to learn about valid usernames on the target system. On some SMTP servers, EXPN can be used to show the subscribers of a mailing list subscription lists are generally considered to be sensitive information.
  metadata:
    max-request: 1
  tags: mail,expn,network,detect

tcp:
  - inputs:
      - data: "65686c6f20636865636b746c730a"
        type: hex
    read-size: 2048

    host:
      - "{{Hostname}}"
    port: 25

    matchers:
      - type: word
        words:
          - "250-EXPN"
# digest: 490a00463044022047df9aa5f92ea9de229b9a6a1fa56f05af7a5fb984f252ddc352a9c33197a2ac022076c20356e98b1c75ddfb09a2793f492ca75c5ad1918259ea68b0785e91f048b0:922c64590222798bb761d5b6d8e72950
Added more templates 2021-06-28 11:13:01 +00:00			`id: expn-mail-detect`

			`info:`
			`name: EXPN Mail Server Detect`
			`author: r3dg33k`
			`severity: info`
Update expn-mail-detect.yaml 2022-08-16 16:16:16 +00:00			`description: \|`
			`The "EXPN" can be used by attackers to learn about valid usernames on the target system. On some SMTP servers, EXPN can be used to show the subscribers of a mailing list subscription lists are generally considered to be sensitive information.`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
TemplateMan Update [Wed Sep 27 13:29:58 UTC 2023] :robot: 2023-09-27 13:29:58 +00:00			`max-request: 1`
			`tags: mail,expn,network,detect`
Added more templates 2021-06-28 11:13:01 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`tcp:`
Added more templates 2021-06-28 11:13:01 +00:00			`- inputs:`
			`- data: "65686c6f20636865636b746c730a"`
			`type: hex`
Fixing errors in templates Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84 2021-08-27 07:43:24 +00:00			`read-size: 2048`
Added more templates 2021-06-28 11:13:01 +00:00
			`host:`
			`- "{{Hostname}}"`
removed duplicate network request 2023-09-16 19:35:21 +00:00			`port: 25`
Added more templates 2021-06-28 11:13:01 +00:00
			`matchers:`
			`- type: word`
			`words:`
Update expn-mail-detect.yaml 2022-08-16 16:16:16 +00:00			`- "250-EXPN"`
Auto Template Signing [Thu Oct 19 13:13:50 UTC 2023] :robot: 2023-10-19 13:13:52 +00:00			`# digest: 490a00463044022047df9aa5f92ea9de229b9a6a1fa56f05af7a5fb984f252ddc352a9c33197a2ac022076c20356e98b1c75ddfb09a2793f492ca75c5ad1918259ea68b0785e91f048b0:922c64590222798bb761d5b6d8e72950`