id: telnet-detect

info:
  name: Telnet Detection
  author: pussycat0x
  severity: info
  description: |
    Telnet is a network protocol used to virtually access a computer and to provide a two-way, collaborative and text-based communication channel between two machines.
  metadata:
    max-request: 1
    shodan-query: port:23 telnet
    verified: true
  tags: network,telnet,detect

tcp:
  - inputs:
      - data: "\n"

    host:
      - "{{Hostname}}"
    port: 23

    matchers:
      - type: word
        words:
          - "Telnet"
          - "Login authentication"
        condition: and
# digest: 490a00463044022064ed155f559cf6f7e80b625f5a3e82de0c000957c3b52bb09819560de9a0adac022032cc98b719326cf299fb6ca148e5bf01edf243969f2af9cb75c5e15d84ec46a4:922c64590222798bb761d5b6d8e72950