nuclei-templates/network/detection/expn-mail-detect.yaml

id: expn-mail-detect

info:
  name: EXPN Mail Server Detect
  author: r3dg33k
  severity: info
  description: |
    The "EXPN" can be used by attackers to learn about valid usernames on the target system. On some SMTP servers, EXPN can be used to show the subscribers of a mailing list subscription lists are generally considered to be sensitive information.
  metadata:
    max-request: 1
  tags: mail,expn,network,detect,smtp

tcp:
  - inputs:
      - data: "65686c6f20636865636b746c730a"
        type: hex
    read-size: 2048

    host:
      - "{{Hostname}}"
    port: 25

    matchers:
      - type: word
        words:
          - "250-EXPN"
# digest: 4a0a00473045022100c110a2bcc4816eacb0939cbe935de97631fceda60c44df0902418c1701033d600220116579bb0301a5094bae8ef301293db3cdd2c5e6f93412da161b9acc9f994025:922c64590222798bb761d5b6d8e72950
Added more templates 2021-06-28 11:13:01 +00:00			`id: expn-mail-detect`

			`info:`
			`name: EXPN Mail Server Detect`
			`author: r3dg33k`
			`severity: info`
Update expn-mail-detect.yaml 2022-08-16 16:16:16 +00:00			`description: \|`
			`The "EXPN" can be used by attackers to learn about valid usernames on the target system. On some SMTP servers, EXPN can be used to show the subscribers of a mailing list subscription lists are generally considered to be sensitive information.`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
TemplateMan Update [Wed Sep 27 13:29:58 UTC 2023] :robot: 2023-09-27 13:29:58 +00:00			`max-request: 1`
tagging updates for SSL & network related templates 2023-12-07 21:57:41 +00:00			`tags: mail,expn,network,detect,smtp`
Added more templates 2021-06-28 11:13:01 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`tcp:`
Added more templates 2021-06-28 11:13:01 +00:00			`- inputs:`
			`- data: "65686c6f20636865636b746c730a"`
			`type: hex`
Fixing errors in templates Related nuclei tickets: * #259 - dynamic key-value field support for template information * #940 - new infos in template * #834 * RES-84 2021-08-27 07:43:24 +00:00			`read-size: 2048`
Added more templates 2021-06-28 11:13:01 +00:00
			`host:`
			`- "{{Hostname}}"`
removed duplicate network request 2023-09-16 19:35:21 +00:00			`port: 25`
Added more templates 2021-06-28 11:13:01 +00:00
			`matchers:`
			`- type: word`
			`words:`
Update expn-mail-detect.yaml 2022-08-16 16:16:16 +00:00			`- "250-EXPN"`
Auto Template Signing [Fri Dec 8 07:58:29 UTC 2023] :robot: 2023-12-08 07:58:29 +00:00			`# digest: 4a0a00473045022100c110a2bcc4816eacb0939cbe935de97631fceda60c44df0902418c1701033d600220116579bb0301a5094bae8ef301293db3cdd2c5e6f93412da161b9acc9f994025:922c64590222798bb761d5b6d8e72950`