id: weblogic-iiop-detect
info:
name: Weblogic IIOP Protocol Detection
author: F1tz
severity: info
description: |
The IIOP (Internet Inter-ORB Protocol) protocol makes it possible for distributed programs written in different programming languages to communicate over the Internet.
metadata:
max-request: 1
tags: network,weblogic,detect,oracle,iiop
tcp:
- inputs:
- data: "{{hex_decode('47494f50010200030000001700000002000000000000000b4e616d6553657276696365')}}"
host:
- "{{Hostname}}"
read-size: 1024
matchers-condition: and
matchers:
- type: word
words:
- "GIOP"
- "weblogic"
condition: and
# digest: 4b0a00483046022100c33f8ad05a34b584942398a4eb5a4477bd2617c612a6a6c877e29d4264e82ca1022100dd5d2556db4b1fefb15b5ee96d29bd6252cb51b6383cd5acfa2c2cdb4a7fd1df:922c64590222798bb761d5b6d8e72950
