id: oracle-tns-listener

info:
  name: Oracle TNS Listener - Detect
  author: pussycat0x
  severity: info
  description: |
    Oracle clients communicate with the database using the Transparent Network Substrate (TNS) protocol. When the listener receives a connection request (tcp port 1521, by default), it starts up a new database process and establishes a connection between the client and the database.
  reference:
    - https://www.tenable.com/plugins/nessus/110053
  metadata:
    verified: true
    max-request: 1
    shodan-query: product:"Oracle TNS Listener"
  tags: js,oracle,tns,network
javascript:
  - code: |
      var m = require("nuclei/oracle");
      var c = m.OracleClient();
      var response = c.IsOracle(Host, Port);
      to_json(response);
    args:
      Host: "{{Host}}"
      Port: "1521"

    extractors:
      - type: regex
        name: Version
        regex:
          - 'Oracle TNS Listener Version:([0-9.]+)'

# digest: 4a0a00473045022100eefa5c8bf88f7969c840f0c0a00f70d1fe73fab425a156b9e1fa7e0c146a0c7802202dc17b2d112c6e8ae8a1262e8707f4fb210154a3f2f7015728e4203439774cfb:922c64590222798bb761d5b6d8e72950