Oracle TNS Listener - Detect

javascript/network/detection/oracle-tns-listner.yaml

@@ -0,0 +1,31 @@
+id: oracle-tns-listner
+
+info:
+  name: Oracle TNS Listener - Detect
+  author: pussycat0x
+  severity: info
+  description: |
+    Oracle clients communicate with the database using the Transparent Network Substrate (TNS) protocol. When the listener receives a connection request (tcp port 1521, by default), it starts up a new database process and establishes a connection between the client and the database
+  reference:
+    - https://www.tenable.com/plugins/nessus/110053
+  metadata:
+    verified: true
+    shodan-query: product:"Oracle TNS Listener"
+  tags: js,oracle,tns,network
+
+javascript:
+   - code: |
+      var m = require("nuclei/oracle");
+      var c = m.OracleClient();
+      var response = c.IsOracle(Host, Port);
+      log(to_json(response));
+
+     args:
+      Host: "{{Host}}"
+      Port: "1521"
+
+     extractors:
+      - type: regex
+        name: Version
+        regex:
+          - 'Oracle TNS Listener Version:([0-9.]+)'