diff --git a/javascript/enumeration/nats-server-enum.yaml b/network/enumeration/nats-server-enum.yaml similarity index 83% rename from javascript/enumeration/nats-server-enum.yaml rename to network/enumeration/nats-server-enum.yaml index 506e0bdd28e..4341e4e2765 100644 --- a/javascript/enumeration/nats-server-enum.yaml +++ b/network/enumeration/nats-server-enum.yaml @@ -9,8 +9,15 @@ info: This template connects to NATS servers and retrieves server configuration details including server ID, version, cluster information, authentication settings, and other server properties. Useful for network enumeration and security assessment of NATS messaging infrastructure. + impact: | + Exposure of NATS server information can reveal system configuration, version details, and authentication requirements that may aid in further reconnaissance or exploitation. + remediation: | + Ensure NATS servers are properly configured with authentication, access controls, and are not exposed to untrusted networks unless necessary. + reference: + - https://docs.nats.io/ + - https://github.com/nats-io/nats-server metadata: - verfied: true + verified: true shodan-query: product:"NATS Server" max-request: 1 tags: js,network,nats,tcp,enum @@ -53,7 +60,7 @@ javascript: args: Host: "{{Host}}" - Port: 80 + Port: 4222 extractors: - type: dsl