nuclei-templates/network/detection/cisco-finger-detect.yaml

29 lines
583 B
YAML

id: cisco-finger-detect
info:
name: Cisco Finger Daemon Detection
author: pussycat0x
severity: low
description: |
The finger daemon runs on TCP port 79. The client will (in the case of remote hosts) open a connection to port 79.
metadata:
verified: true
shodan-query: product:"Cisco fingerd"
tags: network,finger
tcp:
- inputs:
- data: "\n"
host:
- "{{Hostname}}"
- "{{Host}}:79"
matchers:
- type: word
part: body
words:
- "Interface"
- "Mode"
- "User"
condition: and