Merge pull request #2941 from geeknik/patch-40

Create detect-jabber-xmpp.yaml
patch-1
Sandeep Singh 2021-10-21 04:15:15 +05:30 committed by GitHub
commit 8295a5cb72
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 24 additions and 0 deletions

View File

@ -0,0 +1,24 @@
id: detect-jabber-xmpp
info:
name: Detects Jabber XMPP Instance
author: geeknik
severity: info
description: Jabber is the original name of the Extensible Messaging and Presence Protocol (XMPP), the open technology for instant messaging and presence.
reference: https://datatracker.ietf.org/doc/html/rfc6120
tags: network,jabber,xmpp
network:
- inputs:
- data: "a\n"
host:
- "{{Hostname}}"
- "{{Hostname}}:5222"
matchers:
- type: word
words:
- "stream:stream xmlns:stream"
- "stream:error xmlns:stream"
condition: or