id: tftp-detect

info:
  name: TFTP Service - Detection
  author: pussycat0x,matejsmycka
  severity: info
  description: |
    Detect TFTP Service.
  metadata:
    verified: true
    max-request: 1
    shodan-query: "port:69"
  tags: js,tftp,udp,network
javascript:
  - pre-condition: |
      isUDPPortOpen(Host,Port);
    code: |
      let packet = bytes.NewBuffer();
      let message = "1.txt"
      let data = message;
      packet.WriteString(data)
      let c = require("nuclei/net");
      let conn = c.Open('udp', `${Host}:${Port}`);
      conn.SendHex(packet.Hex());
      let resp = conn.RecvString(256);
      resp;

    args:
      Host: "{{Host}}"
      Port: 69

    matchers:
      - type: word
        words:
          - "Unknown transfer ID"
          - "File not found"
          - "illegal operation"
          - "illegal (unrecognized) tftp operation"
          - "permission denied!"
        condition: or
        case-insensitive: true
# digest: 490a00463044022064a1d317037500cb4cd77a64d1559e761c59bc94acee6a6c5c69099df6dbafd502201be15f593677c06b89fdc3ce2da5aa2a3bbd669d80bd12ed5fcfbfac7ac0ff55:922c64590222798bb761d5b6d8e72950