Indent - fix
parent
f149053dfe
commit
d9021ee637
|
@ -1,11 +1,10 @@
|
||||||
id: smb-anonymous-access
|
id: smb-anonymous-access
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: SMB Anonymous Access - Detect
|
name: SMB Anonymous Access Detection
|
||||||
author: pussycat0x
|
author: pussycat0x
|
||||||
severity: high
|
severity: high
|
||||||
description: |
|
description: |
|
||||||
smb anonymous access detect
|
Detects anonymous access to SMB shares on a remote server.
|
||||||
reference:
|
reference:
|
||||||
- https://wadcoms.github.io/wadcoms/SMBClient-List-Shares-Anonymous/
|
- https://wadcoms.github.io/wadcoms/SMBClient-List-Shares-Anonymous/
|
||||||
metadata:
|
metadata:
|
||||||
|
@ -14,24 +13,23 @@ info:
|
||||||
tags: js,network,smb,enum,misconfig
|
tags: js,network,smb,enum,misconfig
|
||||||
|
|
||||||
javascript:
|
javascript:
|
||||||
- pre-condition: |
|
- pre-condition: |
|
||||||
var m = require("nuclei/smb");
|
var m = require("nuclei/smb");
|
||||||
var c = m.SMBClient();
|
var c = m.SMBClient();
|
||||||
c.ListSMBv2Metadata(Host, Port);
|
c.ListSMBv2Metadata(Host, Port);
|
||||||
|
code: |
|
||||||
code: |
|
|
||||||
var m = require("nuclei/smb");
|
var m = require("nuclei/smb");
|
||||||
var c = m.SMBClient();
|
var c = m.SMBClient();
|
||||||
var response = c.ListShares(Host, Port, User, Pass);
|
var response = c.ListShares(Host, Port, User, Pass);
|
||||||
log(to_json(response));
|
log(to_json(response));
|
||||||
|
|
||||||
args:
|
args:
|
||||||
Host: "{{Host}}"
|
Host: "{{Host}}"
|
||||||
Port: "5432"
|
Port: "5432"
|
||||||
User: " "
|
User: " "
|
||||||
Pass: " "
|
Pass: " "
|
||||||
|
|
||||||
extractors:
|
extractors:
|
||||||
- type: json
|
- type: json
|
||||||
name: SMB Shares
|
name: SMB Shares
|
||||||
json:
|
json:
|
||||||
|
|
|
@ -1,7 +1,6 @@
|
||||||
id: smb-share
|
id: smb-share
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: SMB Shares - Enumeration
|
name: SMB Shares - Enumeration
|
||||||
author: pussycat0x
|
author: pussycat0x
|
||||||
severity: low
|
severity: low
|
||||||
description: |
|
description: |
|
||||||
|
@ -14,24 +13,24 @@ info:
|
||||||
tags: js,network,smb,enum
|
tags: js,network,smb,enum
|
||||||
|
|
||||||
javascript:
|
javascript:
|
||||||
- pre-condition: |
|
- pre-condition: |
|
||||||
var m = require("nuclei/smb");
|
var m = require("nuclei/smb");
|
||||||
var c = m.SMBClient();
|
var c = m.SMBClient();
|
||||||
c.ListSMBv2Metadata(Host, Port);
|
c.ListSMBv2Metadata(Host, Port);
|
||||||
|
|
||||||
code: |
|
code: |
|
||||||
var m = require("nuclei/smb");
|
var m = require("nuclei/smb");
|
||||||
var c = m.SMBClient();
|
var c = m.SMBClient();
|
||||||
var response = c.ListShares(Host, Port, User, Pass);
|
var response = c.ListShares(Host, Port, User, Pass);
|
||||||
to_json(response);
|
to_json(response);
|
||||||
|
|
||||||
args:
|
args:
|
||||||
Host: "{{Host}}"
|
Host: "{{Host}}"
|
||||||
Port: "445"
|
Port: "445"
|
||||||
User: "test"
|
User: "test"
|
||||||
Pass: "test"
|
Pass: "test"
|
||||||
|
|
||||||
extractors:
|
extractors:
|
||||||
- type: json
|
- type: json
|
||||||
name: SMB Shares
|
name: SMB Shares
|
||||||
json:
|
json:
|
||||||
|
|
|
@ -1,5 +1,4 @@
|
||||||
id: smb-signing-not-required
|
id: smb-signing-not-required
|
||||||
|
|
||||||
info:
|
info:
|
||||||
name: SMB Signing not required
|
name: SMB Signing not required
|
||||||
author: pussycat0x
|
author: pussycat0x
|
||||||
|
@ -15,27 +14,26 @@ info:
|
||||||
tags: js,network,smb,enum
|
tags: js,network,smb,enum
|
||||||
|
|
||||||
javascript:
|
javascript:
|
||||||
- pre-condition: |
|
- pre-condition: |
|
||||||
var m = require("nuclei/smb");
|
var m = require("nuclei/smb");
|
||||||
var c = m.SMBClient();
|
var c = m.SMBClient();
|
||||||
c.ListSMBv2Metadata(Host, Port);
|
c.ListSMBv2Metadata(Host, Port);
|
||||||
|
|
||||||
code: |
|
code: |
|
||||||
var m = require("nuclei/smb");
|
var m = require("nuclei/smb");
|
||||||
var c = m.SMBClient();
|
var c = m.SMBClient();
|
||||||
var response = c.ListSMBv2Metadata(Host, Port, User, Pass);
|
var response = c.ListSMBv2Metadata(Host, Port, User, Pass);
|
||||||
to_json(response);
|
to_json(response);
|
||||||
|
|
||||||
args:
|
args:
|
||||||
Host: "{{Host}}"
|
Host: "{{Host}}"
|
||||||
Port: "5432"
|
Port: "5432"
|
||||||
User: "test"
|
User: "test"
|
||||||
Pass: "test"
|
Pass: "test"
|
||||||
|
|
||||||
matchers:
|
matchers:
|
||||||
- type: word
|
- type: word
|
||||||
words:
|
words:
|
||||||
- '"SigningEnabled": true'
|
- '"SigningEnabled": true'
|
||||||
- '"SigningRequired": false'
|
- '"SigningRequired": false'
|
||||||
condition: and
|
condition: and
|
||||||
|
|
Loading…
Reference in New Issue