nuclei-templates/network/misconfig/erlang-daemon.yaml

38 lines
1.2 KiB
YAML

id: erlang-daemon
info:
name: Erlang Port Mapper Daemon
author: pussycat0x
severity: low
description: |
The erlang port mapper daemon is used to coordinate distributed erlang instances. His job is to keep track of which node name listens on which address. Hence, epmd map symbolic node names to machine addresses.
reference:
- https://nmap.org/nsedoc/scripts/epmd-info.html
- https://book.hacktricks.xyz/network-services-pentesting/4369-pentesting-erlang-port-mapper-daemon-epmd
- https://medium.com/@_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd
metadata:
max-request: 1
shodan-query: product:"Erlang Port Mapper Daemon"
verified: true
tags: demon,enum,erlang,epmd
tcp:
- inputs:
- data: "\x00\x01\x6e"
host:
- "{{Hostname}}"
port: 4369
matchers:
- type: word
words:
- "HTTP/1.1"
negative: true
extractors:
- type: dsl
name: default-instances
dsl:
- trim(raw, '[ ]')
# digest: 4a0a0047304502205e3d32aaa31805fb16eb5543fd1703da066ed645af6aadfa0048cbec4525f7da022100dcf07bf261985800a8875b8db6ec143915468d2c165a99ff3ee32319011ca354:922c64590222798bb761d5b6d8e72950