more network templates

network/java-rmi-detect.yaml

@@ -0,0 +1,19 @@
+id: java-rmi-detect
+
+info:
+  name: Detect Java RMI Protocol
+  author: F1tz
+  severity: info
+  tags: network,rmi
+
+network:
+  - inputs:
+    - data: "{{hex_decode('4a524d4900024b')}}"
+    read-size: 1024
+    host:
+      - "{{Hostname}}"
+    matchers:
+      - type: regex
+        part: raw
+        regex:
+          - "^N\\x00\\x0e(\\d{1,3}\\.){3}\\d{1,3}\\x00\\x00"

network/weblogic-iiop-detect.yaml

@@ -0,0 +1,22 @@
+id: weblogic-iiop-detect
+
+info:
+  name: Detect Weblogic IIOP Protocol
+  author: F1tz
+  severity: info
+  description: Check IIOP protocol status.
+  tags: network,weblogic
+
+network:
+  - inputs:
+    - data: "{{hex_decode('47494f50010200030000001700000002000000000000000b4e616d6553657276696365')}}"
+    read-size: 1024
+    host:
+      - "{{Hostname}}"
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "GIOP"
+          - "weblogic"
+        condition: and

network/weblogic-t3-detect.yaml

@@ -0,0 +1,19 @@
+id: weblogic-t3-detect
+
+info:
+  name: Detect Weblogic T3 Protocol
+  author: F1tz
+  severity: info
+  description: Check T3 protocol status.
+  tags: network,weblogic
+
+network:
+  - inputs:
+    - data: "t3 12.2.1\nAS:255\nHL:19\nMS:10000000\nPU:t3://us-l-breens:7001\n\n"
+    read-size: 1024
+    host:
+      - "{{Hostname}}"
+    matchers:
+      - type: word
+        words:
+          - "HELO"