fix: false positive erlang-daemon.yaml

patch-7
Muhammad Daffa 2024-08-16 16:24:33 +07:00 committed by GitHub
parent 88d036d900
commit 300c9f3402
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 12 additions and 6 deletions

View File

@ -2,7 +2,7 @@ id: erlang-daemon
info: info:
name: Erlang Port Mapper Daemon name: Erlang Port Mapper Daemon
author: pussycat0x author: pussycat0x,daffainfo
severity: low severity: low
description: | description: |
The erlang port mapper daemon is used to coordinate distributed erlang instances. His job is to keep track of which node name listens on which address. Hence, epmd map symbolic node names to machine addresses. The erlang port mapper daemon is used to coordinate distributed erlang instances. His job is to keep track of which node name listens on which address. Hence, epmd map symbolic node names to machine addresses.
@ -23,15 +23,21 @@ tcp:
- "{{Hostname}}" - "{{Hostname}}"
port: 4369 port: 4369
matchers-condition: and
matchers: matchers:
- type: word - type: word
words: words:
- "HTTP/1.1" - "HTTP/1.1"
negative: true negative: true
- type: word
words:
- "name"
- "at port"
condition: and
extractors: extractors:
- type: dsl - type: regex
name: default-instances regex:
dsl: - 'name (.*?) at port ([0-9]+)'
- trim(raw, '[ ]') # digest: 4a0a00473045022100cd83b7db7a738badc1ee1068f3a27f5e39a1eafbc3fd6c11c58bc700109e3f2a022071036860511978e2b00c92aa9a2b0194d89a829466b94273f7824ddf95aca5af:922c64590222798bb761d5b6d8e72950
# digest: 4a0a00473045022100cd83b7db7a738badc1ee1068f3a27f5e39a1eafbc3fd6c11c58bc700109e3f2a022071036860511978e2b00c92aa9a2b0194d89a829466b94273f7824ddf95aca5af:922c64590222798bb761d5b6d8e72950