id: java-rmi-detect

info:
  name: Detect Java RMI Protocol
  author: F1tz
  severity: info
  tags: network,rmi,java

network:
  - inputs:
      - data: "{{hex_decode('4a524d4900024b')}}"

    host:
      - "{{Hostname}}"
    read-size: 1024

    matchers:
      - type: regex
        part: raw
        regex:
          - "^N\\x00\\x0e(\\d{1,3}\\.){3}\\d{1,3}\\x00\\x00"