From b9036e080eec3991e0bfb7b06eccafcaa7523afb Mon Sep 17 00:00:00 2001 From: MostInterestingBotInTheWorld <98333686+MostInterestingBotInTheWorld@users.noreply.github.com> Date: Mon, 6 Feb 2023 10:29:04 -0500 Subject: [PATCH] Enhancement: network/detection/rpcbind-portmapper-detect.yaml by md --- network/detection/rpcbind-portmapper-detect.yaml | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/network/detection/rpcbind-portmapper-detect.yaml b/network/detection/rpcbind-portmapper-detect.yaml index 5605cd01ee..7aad094397 100644 --- a/network/detection/rpcbind-portmapper-detect.yaml +++ b/network/detection/rpcbind-portmapper-detect.yaml @@ -1,10 +1,15 @@ id: rpcbind-portmapper-detect info: - name: RPCBind Portmapper Detection + name: Rpcbind Portmapper - Detect author: geeknik severity: info + description: Rpcbind portmapper was detected. reference: https://book.hacktricks.xyz/pentesting/pentesting-rpcbind + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 metadata: verified: true shodan-query: port:"111" @@ -23,3 +28,5 @@ network: - type: word words: - "/run/rpcbind.sock" + +# Enhanced by md on 2023/02/06