From 094d1da1a06db292484465c86c0999715f92d54f Mon Sep 17 00:00:00 2001
From: pussycat0x <65701233+pussycat0x@users.noreply.github.com>
Date: Tue, 18 Oct 2022 15:11:24 +0530
Subject: [PATCH] ProFTPD Server Detect

---
 network/detection/proftpd-server-detect.yaml | 28 ++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 network/detection/proftpd-server-detect.yaml

diff --git a/network/detection/proftpd-server-detect.yaml b/network/detection/proftpd-server-detect.yaml
new file mode 100644
index 0000000000..5f4b92dd96
--- /dev/null
+++ b/network/detection/proftpd-server-detect.yaml
@@ -0,0 +1,28 @@
+id: proftpd-server-detect
+
+info:
+  name: ProFTPD Server Detect
+  author: pussycat0x
+  severity: info
+  description: |
+    The File Transfer Protocol (FTP) is a standard network protocol used to transfer computer files between a client and server on a computer network.
+  metadata:
+    verified: true
+    shodan-query: 'product:"ProFTPD"'
+  tags: network,ftp,proftpd
+
+network:
+
+  - inputs:
+      - data: "\n"
+    host:
+      - "{{Hostname}}"
+      - "{{Host}}:21"
+    matchers:
+      - type: word
+        words:
+          - "ProFTPD"
+    extractors:
+      - type: regex
+        regex:
+          - "ProFTPD ([0-9.a-z]+) Server"