adds matcher to ftp anonymous login which checks for bad http responses (false positives)

2023-01-05 14:33:20 -06:00 · 2023-01-05 14:33:20 -06:00 · 25fb048156
parent a83d28beb0
commit 25fb048156
1 changed files with 6 additions and 0 deletions
--- a/network/ftp-anonymous-login.yaml
+++ b/network/ftp-anonymous-login.yaml
@ -21,6 +21,7 @@ network:
      - "{{Host}}:21"
      - "{{Hostname}}"

+    matchers-condition: and
    matchers:
      - type: word
        part: raw
@ -29,3 +30,8 @@ network:
          - "Logged in anonymously"
          - "230"
        condition: or
+      - type: word
+        part: raw
+        words:
+          - "Bad Request"
+        negative: true