id: oracle-detect

info:
  name: Oracle - Detection
  author: pussycat0x
  severity: info
  description: Detects if a target host is running Oracle service on port 1521
  metadata:
    verified: true
    max-request: 1
    shodan-query: oracle port:1521
  tags: js,network,oracle,info,enum,discovery

javascript:
  - code: |
      let m = require('nuclei/oracle');
      let response = m.IsOracle(Host,Port);
      Export(response);

    args:
      Host: "{{Host}}"
      Port: "1521"

    matchers:
      - type: dsl
        dsl:
          - 'success == true'
          - 'contains(response, "\"IsOracle\": true")'
        condition: and
# digest: 490a004630440220076b897dc7cc709d2244577b1b8f73ec80bd15d5cbaccfc40d4a88f0be02c39002202233268000209fe156c9dd65a9dc7a30d86c51a0b1fd4f7ca453523307fafcdf:922c64590222798bb761d5b6d8e72950