id: riak-detect

info:
  name: Riak Detection
  author: pussycat0x
  severity: info
  description: Riak is a distributed NoSQL key-value data store that offers high availability, fault tolerance, operational simplicity, and scalability.
  metadata:
    max-request: 2
    verified: true
    shodan-query: product:"Riak"
  tags: network,oss

tcp:
  - inputs:
      - data: 0000000107
        type: hex

    host:
      - "{{Hostname}}"
      - "{{Host}}:8087"

    read-size: 2048
    matchers:
      - type: word
        words:
          - "riak"

    extractors:
      - type: regex
        regex:
          - "riak@([0-9.]+)..([0-9.]+([a-z]+[0-9]))"