Delete network/detection/smb-detect.yaml

patch-4
pussycat0x 2024-05-22 14:02:07 +05:30 committed by GitHub
parent 0a32b0d326
commit 285ced4811
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 0 additions and 27 deletions

View File

@ -1,27 +0,0 @@
id: smb-detect
info:
name: SMB Detection
author: pussycat0x
severity: low
description: |
SMB (Server Message Block) is a network-layered protocol mainly used on Windows for sharing files, printers, and communication between network-attached computers. SMB related vulnerabilities can be levaraged to compromise large-scale systems.
metadata:
max-request: 1
tags: network,windows,linux,smb,service,detect
tcp:
- inputs:
- data: 00000031ff534d4272000000001845680000000000000000000000000000be2200000100000e00024e54204c4d20302e3132000200
type: hex
host:
- "{{Hostname}}"
port: 445
matchers:
- type: word
words:
- "SMBr"
- "NT LM"
condition: or