Update msmq-detect.yaml

patch-1
Ritik Chaddha 2023-04-20 02:28:15 +05:30 committed by GitHub
parent d4b490195d
commit 5dc6036a9a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 6 additions and 4 deletions

View File

@ -1,18 +1,20 @@
id: msmq-detect
info:
name: MSMQ (Microsoft Message Queuing Service) Remote Detection
name: MSMQ (Microsoft Message Queuing Service) Remote - Detect
author: bhutch
severity: info
description: Detects remote MSMQ services. Public exposure of this service may be a misconfiguration.
metadata:
censys-query: services.service_name:MSMQ
reference:
- https://www.shadowserver.org/what-we-do/network-reporting/accessible-msmq-service-report/
- https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mqqb/f9bbe350-d70b-4e90-b9c7-d39328653166
- https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mqqb/50da7ea1-eed7-41f9-ba6a-2aa37f5f1e92
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21554
tags: network,msmq
metadata:
verified: "true"
shodan-query: MSMQ
censys-query: services.service_name:MSMQ
tags: network,msmq,detect
network:
- inputs: