mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-01-31 15:53:33 +08:00
Update NATS server enumeration template - fix typo, add impact/remediation, correct port, and move to network/enumeration directory
This commit is contained in:
@@ -9,8 +9,15 @@ info:
|
||||
This template connects to NATS servers and retrieves server configuration details including
|
||||
server ID, version, cluster information, authentication settings, and other server properties.
|
||||
Useful for network enumeration and security assessment of NATS messaging infrastructure.
|
||||
impact: |
|
||||
Exposure of NATS server information can reveal system configuration, version details, and authentication requirements that may aid in further reconnaissance or exploitation.
|
||||
remediation: |
|
||||
Ensure NATS servers are properly configured with authentication, access controls, and are not exposed to untrusted networks unless necessary.
|
||||
reference:
|
||||
- https://docs.nats.io/
|
||||
- https://github.com/nats-io/nats-server
|
||||
metadata:
|
||||
verfied: true
|
||||
verified: true
|
||||
shodan-query: product:"NATS Server"
|
||||
max-request: 1
|
||||
tags: js,network,nats,tcp,enum
|
||||
@@ -53,7 +60,7 @@ javascript:
|
||||
|
||||
args:
|
||||
Host: "{{Host}}"
|
||||
Port: 80
|
||||
Port: 4222
|
||||
|
||||
extractors:
|
||||
- type: dsl
|
||||
Reference in New Issue
Block a user