Adding network templates

network/exposed-redis.yaml

@@ -0,0 +1,26 @@
+id: exposed-redis
+
+info:
+  name: Redis Unauth Server
+  author: pd-team
+  severity: high
+  reference: https://redis.io/topics/security
+  tags: network,redis
+
+network:
+  - inputs:
+      - data: "info\r\nquit\r\n"
+
+    host:
+      - "{{Hostname}}"
+    read-size: 2048
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "redis_version"
+      - type: word
+        negative: true
+        words:
+          - "redis_mode:sentinel"

network/exposed-zookeeper.yaml

@@ -0,0 +1,21 @@
+id: exposed-zookeeper
+
+info:
+  name: ZooKeeper Unauth Server
+  author: pd-team
+  severity: high
+  reference: https://zookeeper.apache.org/security.html
+  tags: network,zookeeper
+
+network:
+  - inputs:
+      - data: "envi\r\nquit\r\n"
+
+    host:
+      - "{{Hostname}}"
+    read-size: 2048
+
+    matchers:
+      - type: word
+        words:
+          - "zookeeper.version"

network/memcached-stats.yaml

@@ -0,0 +1,20 @@
+id: memcached-stats
+
+info:
+  name: Memcached stats disclosure
+  author: pd-team
+  severity: low
+  tags: network,memcached
+
+network:
+  - inputs:
+      - data: "stats\r\n\r\nquit\r\n"
+
+    host:
+      - "{{Hostname}}"
+    read-size: 2048
+
+    matchers:
+      - type: word
+        words:
+          - "STAT "

network/mongodb-detect.yaml

@@ -0,0 +1,23 @@
+id: mongodb-detect
+
+info:
+  name: MongoDB Detection
+  author: pd-team
+  severity: info
+  reference: https://github.com/orleven/Tentacle
+  tags: network,mongodb
+
+network:
+  - inputs:
+      - data: 3a000000a741000000000000d40700000000000061646d696e2e24636d640000000000ffffffff130000001069736d6173746572000100000000
+        type: hex
+
+    host:
+      - "{{Hostname}}"
+    read-size: 2048
+
+    matchers:
+      - type: word
+        words:
+          - "logicalSessionTimeout"
+          - "localTime"

network/mongodb-unauth.yaml

@@ -0,0 +1,21 @@
+id: mongodb-unauth
+
+info:
+  name: Unauth MongoDB Disclosure
+  author: pd-team
+  severity: high
+  reference: https://github.com/orleven/Tentacle
+  tags: network,mongodb
+
+network:
+  - inputs:
+      - data: 480000000200000000000000d40700000000000061646d696e2e24636d6400000000000100000021000000026765744c6f670010000000737461727475705761726e696e67730000
+        type: hex
+
+    host:
+      - "{{Hostname}}"
+    read-size: 2048
+    matchers:
+      - type: word
+        words:
+          - "totalLinesWritten"