id: vnc-service-detect
info:
name: VNC Service Detection
author: pussycat0x
severity: info
description: A Virtual Network Computing (VNC) service was detected.
classification:
cwe-id: CWE-200
tags: network,vnc,service,detect
metadata:
max-request: 2
tcp:
- inputs:
- data: "\r\n"
host:
- "{{Host}}:5900"
- "{{Hostname}}"
matchers:
- type: word
words:
- "RFB"
extractors:
- type: regex
part: body
regex:
- "RFB ([0-9.]+)"
