id: apache-dubbo-unauth

info:
  name: Apache Dubbo - Unauthenticated Access
  author: j4vaovo
  severity: high
  description: |
    Apache Dubbo Unauthenticated Access were detected.
  reference:
    - https://dubbo.apache.org/en/docs3-v2/java-sdk/advanced-features-and-usage/security/auth/
  metadata:
    fofa-query: apache dubbo
    max-request: 2
    verified: true
  tags: network,dubbo,apache,unauth,misconfig

tcp:
  - inputs:
      - data: "68656c700d0a"
        type: hex

    host:
      - "{{Hostname}}"
      - "{{Host}}:20880"
    read-size: 2048

    matchers:
      - type: word
        words:
          - "trace [service] [method] [times]"