Merge pull request #7420 from j4vaovo/patch-55

Create apache-dubbo-unauth.yaml

network/misconfig/apache-dubbo-unauth.yaml

@@ -0,0 +1,29 @@
+id: apache-dubbo-unauth
+
+info:
+  name: Apache Dubbo - Unauthenticated Access
+  author: j4vaovo
+  severity: high
+  description: |
+    Apache Dubbo Unauthenticated Access were detected.
+  reference:
+    - https://dubbo.apache.org/en/docs3-v2/java-sdk/advanced-features-and-usage/security/auth/
+  metadata:
+    verified: true
+    fofa-query: "apache dubbo"
+  tags: network,dubbo,apache,unauth,misconfig
+
+tcp:
+  - inputs:
+      - data: "68656c700d0a"
+        type: hex
+
+    host:
+      - "{{Hostname}}"
+      - "{{Host}}:20880"
+    read-size: 2048
+
+    matchers:
+      - type: word
+        words:
+          - "trace [service] [method] [times]"