daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

misc fix

patch-1
sandeep 2023-09-29 14:51:39 +05:30
parent e109f59372
commit 9fa9792dbf
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
network/detection/bgp-detect.yaml
View File

@ -4,7 +4,6 @@ info:
name: BGP Detection name: BGP Detection
author: danfaizer author: danfaizer
severity: info severity: info
tags: network,bgp,detect
description: | description: |
The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router. The remote host is running BGP, a popular routing protocol. This indicates that the remote host is probably a network router.
impact: | impact: |
@ -16,10 +15,14 @@ info:
reference: reference:
- https://www.acunetix.com/vulnerabilities/network/vulnerability/bgp-detection/ - https://www.acunetix.com/vulnerabilities/network/vulnerability/bgp-detection/
- https://www.tenable.com/plugins/nessus/11907 - https://www.tenable.com/plugins/nessus/11907
metadata:
shodan-query: product:"BGP"
tags: network,bgp
tcp: tcp:
- inputs: - inputs:
- data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF001D010400FFFF0000B4C0 - data: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF001D010400FFFF0000B4C0
type: hex
# Source: https://www.rfc-editor.org/rfc/rfc4271.html#section-4.2 # Source: https://www.rfc-editor.org/rfc/rfc4271.html#section-4.2
# FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF represents the 16-byte marker field. # FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF represents the 16-byte marker field.
# 001D is the total length of the BGP message, including the 19 bytes of the header and the optional parameters. # 001D is the total length of the BGP message, including the 19 bytes of the header and the optional parameters.
@ -28,17 +31,14 @@ tcp:
# FFFF represents the Autonomous System Number (ASN) in hexadecimal format. # FFFF represents the Autonomous System Number (ASN) in hexadecimal format.
# 0000 represents the Hold Time. # 0000 represents the Hold Time.
# B4C0 represents the BGP Identifier, usually an IP address in hexadecimal format. # B4C0 represents the BGP Identifier, usually an IP address in hexadecimal format.
type: hex
name: resp
host: host:
- "{{Hostname}}" - "{{Hostname}}"
- "{{Host}}:179" port: 179
read-size: 16 read-size: 16
matchers: matchers:
- type: word - type: word
encoding: hex encoding: hex
words: words:
- "ffffffffffffffffffffffffffffffff" - "ffffffffffffffffffffffffffffffff"