nuclei-templates/network/detection/rsyncd-service-detect.yaml

40 lines
735 B
YAML

id: rsyncd-service-detect
info:
name: Rsyncd Service - Detect
author: vsh00t,geeknik
severity: info
description: |
Rsyncd service was detected.
reference:
- https://linux.die.net/man/1/rsync
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
tags: network,rsyncd
metadata:
max-request: 2
tcp:
- inputs:
- data: "?\r\n"
host:
- "{{Hostname}}"
- "{{Host}}:873"
matchers:
- type: word
words:
- "RSYNCD: "
- "ERROR: protocol startup error"
condition: and
extractors:
- type: regex
regex:
- 'RSYNCD: \d\d.\d'
# Enhanced by md on 2023/02/06