Merge pull request #2740 from pussycat0x/master

iPlanet Messaging IMAP Protocol Detection
2021-09-25 01:00:52 +05:30 · 2021-09-25 01:00:52 +05:30 · a71e2c9e62
parent 93b6f3a799 811f323f65
commit a71e2c9e62
1 changed files with 27 additions and 0 deletions
--- a/network/iplanet-imap-detect.yaml
+++ b/network/iplanet-imap-detect.yaml
@ -0,0 +1,27 @@
+id: iplanet-imap-detect
+
+info:
+  name: iplanet messaging imap protocol
+  author: pussycat0x
+  severity: info
+  metadata:
+    fofa-dork: 'app="iPlanet-Messaging-Server-5.2" && protocol="imap"'
+  tags: network,imap
+
+network:
+  - inputs:
+      - data: "\n"
+    host:
+      - "{{Hostname}}"
+      - "{{Hostname}}:110"
+
+    matchers:
+      - type: word
+        words:
+          - "iPlanet Messaging Server"
+
+    extractors:
+      - type: regex
+        part: body
+        regex:
+          - "iPlanet Messaging Server ([0-9.]+)"