Update NATS server enumeration template - fix typo, add impact/remediation, correct port, and move to network/enumeration directory

This commit is contained in:
Prince Chaddha
2025-07-16 23:02:42 +04:00
parent 316ba9657d
commit daaadb83bc

View File

@@ -9,8 +9,15 @@ info:
This template connects to NATS servers and retrieves server configuration details including
server ID, version, cluster information, authentication settings, and other server properties.
Useful for network enumeration and security assessment of NATS messaging infrastructure.
impact: |
Exposure of NATS server information can reveal system configuration, version details, and authentication requirements that may aid in further reconnaissance or exploitation.
remediation: |
Ensure NATS servers are properly configured with authentication, access controls, and are not exposed to untrusted networks unless necessary.
reference:
- https://docs.nats.io/
- https://github.com/nats-io/nats-server
metadata:
verfied: true
verified: true
shodan-query: product:"NATS Server"
max-request: 1
tags: js,network,nats,tcp,enum
@@ -53,7 +60,7 @@ javascript:
args:
Host: "{{Host}}"
Port: 80
Port: 4222
extractors:
- type: dsl