add ftp detect and workflow

This commit is contained in:
Anton Strilez
2025-09-01 14:09:28 +02:00
committed by GitHub
parent d104571f3a
commit aa739e95dc
2 changed files with 42 additions and 0 deletions

View File

@@ -0,0 +1,32 @@
id: ftp-detec
info:
name: FTP Service - Detect
author: Mys7ic
severity: info
description: |
FTP service was detected.
reference:
- https://www.rfc-editor.org/rfc/rfc959
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
metadata:
max-request: 1
tags: network,ftp,detect,detection,tcp
tcp:
- inputs:
- data: "\r\n"
host:
- "{{Hostname}}"
port: 21
read-size: 2048
matchers-condition: or
matchers:
- type: regex
regex:
- "^220.*FTP.*"
- type: word
words:
- "FTP"

View File

@@ -0,0 +1,10 @@
id: ftp-workflow
info:
name: FTP Security Checks
author: Mys7ic
description: A simple workflow that runs all FTP related nuclei templates on a given target.
workflows:
- template: network/detection/ftp-detect.yaml
subtemplates:
- tags: ssh