Added basic gopher detection

2022-07-01 20:55:28 +05:30 · 2022-07-01 20:55:28 +05:30 · a3c3c75483
parent bfe5415038
commit a3c3c75483
1 changed files with 19 additions and 0 deletions
--- a/network/gopher-detection.yaml
+++ b/network/gopher-detection.yaml
@ -0,0 +1,19 @@
+id: gopher-detection
+
+info:
+  name: Gopher Detection
+  author: pry0cc
+  severity: info
+  tags: network,gopher
+
+network:
+  - inputs:
+      - data: "\r\n"
+    host:
+      - "{{Hostname}}"
+      - "{{Host}}:70"
+
+    matchers:
+      - type: dsl
+        dsl:
+          - "contains(to_lower(raw), 'gopher')"