id: clamav-detect

info:
  name: ClamAV Server Detect
  author: pussycat0x
  severity: info
  description: |
    Clam AntiVirus is a free software, cross-platform antimalware toolkit able to detect many types of malware, including viruses.
  metadata:
    verified: true
    max-request: 1
    shodan-query: port:3310 product:"ClamAV"
  tags: network,clamav,detect,detection,tcp
tcp:
  - inputs:
      - data: "VERSION"
    host:
      - "{{Hostname}}"
    port: 3310

    matchers:
      - type: regex
        regex:
          - 'ClamAV ([0-9.]+)'

    extractors:
      - type: regex
        regex:
          - "ClamAV ([0-9.]+)"
# digest: 4a0a004730450221009d4712dcf154784d224752976a5279784b7f159bc75b3802896505aaaa5793d702204da14c4548e57050d8b4713c899b87da3b175f90c73895fd82d5a4a27dcfee70:922c64590222798bb761d5b6d8e72950