From fbd4cf4cd4ef875c7e4ec52591127d941083c2e8 Mon Sep 17 00:00:00 2001
From: pussycat0x <65701233+pussycat0x@users.noreply.github.com>
Date: Tue, 2 Apr 2024 13:01:29 +0530
Subject: [PATCH] Create tftp-detect.yaml

---
 javascript/udp/detection/tftp-detect.yaml | 33 +++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 javascript/udp/detection/tftp-detect.yaml

diff --git a/javascript/udp/detection/tftp-detect.yaml b/javascript/udp/detection/tftp-detect.yaml
new file mode 100644
index 0000000000..022cacafa0
--- /dev/null
+++ b/javascript/udp/detection/tftp-detect.yaml
@@ -0,0 +1,33 @@
+id: tftp-detect
+
+info:
+  name: TFTP Service - Detection
+  author: pussycat0x
+  severity: info
+  description: |
+    Detect TFTP Service.
+  metadata:
+    verified: true
+    shodan-query: port:69
+  tags: js,tftp,udp,network
+
+javascript:
+  - code: |
+      let packet = bytes.NewBuffer();
+      let message = "1.txt"
+      let data = message;
+      packet.WriteString(data)
+      let c = require("nuclei/net");
+      let conn = c.Open('udp', `${Host}:${Port}`);
+      conn.SendHex(packet.Hex());
+      let resp = conn.RecvString(256);
+      resp;
+
+    args:
+      Host: "{{Host}}"
+      Port: 69
+
+    matchers:
+      - type: word
+        words:
+          - "Unknown transfer ID"