id: rtsp-detect

info:
  name: RTSP - Detect
  author: pussycat0x
  severity: info
  description: |
    RTSP was detected.
  reference: |
    https://nmap.org/nsedoc/scripts/rtsp-methods.html
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    max-request: 1
    shodan-query: RTSP/1.0
    verified: true
  tags: network,rtsp,detect

tcp:
  - inputs:
      - data: 4f5054494f4e53207369703a6e6d205349502f322e300d0a5669613a205349502f322e302f544350206e6d3b6272616e63683d666f6f0d0a46726f6d3a203c7369703a6e6d406e6d3e3b7461673d726f6f740d0a546f3a203c7369703a6e6d32406e6d323e0d0a43616c6c2d49443a2035303030300d0a435365713a203432204f5054494f4e530d0a4d61782d466f7277617264733a2037300d0a436f6e74656e742d4c656e6774683a20300d0a436f6e746163743a203c7369703a6e6d406e6d3e0d0a4163636570743a206170706c69636174696f6e2f7364700d0a0d0a
        type: hex

    host:
      - "{{Hostname}}"
    port: 554
    read-size: 1024

    matchers:
      - type: word
        words:
          - "RTSP/1.0"