id: beanstalk-service

info:
  name: Beanstalk Service - Detect
  author: pussycat0x
  severity: info
  description: |
    Beanstalk is a simple, fast work queue. Its interface is generic, but was originally designed for reducing the latency of page views in high-volume web applications by running time-consuming tasks asynchronously.
  reference:
    - https://jhadiary.wordpress.com/2016/05/18/beanstalk-helping-commands/
  metadata:
    max-request: 1
    verified: "true"
    shodan-query: port:11300 "cmd-peek"
  tags: network,beanstalk,detect,enum

tcp:
  - inputs:
      - data: "stats\r\n"
        read: 8

    host:
      - "{{Host}}:11300"

    matchers:
      - type: word
        part: raw
        words:
          - "OK"

    extractors:
      - type: regex
        name: stats
        regex:
          - '([a-z-A-Z: 0-9]+)'