diff --git a/network/detection/telnet-detect.yaml b/network/detection/telnet-detect.yaml new file mode 100644 index 0000000000..72be6b1877 --- /dev/null +++ b/network/detection/telnet-detect.yaml @@ -0,0 +1,27 @@ +id: telnet-detect + +info: + name: Telnet Detection + author: pussycat0x + severity: info + description: | + Telnet is a network protocol used to virtually access a computer and to provide a two-way, collaborative and text-based communication channel between two machines. + metadata: + verified: true + shodan-query: port:23 telnet + tags: network,detect,telnet + +network: + - inputs: + - data: "\n" + + host: + - "{{Hostname}}" + - "{{Host}}:23" + + matchers-condition: and + matchers: + - type: word + words: + - "Telnet" + - "Login authentication"