id: oracle-detect

info:
  name: Oracle - Detection
  author: pussycat0x
  severity: info
  description: Detects if a target host is running Oracle service on port 1521
  metadata:
    verified: true
    max-request: 1
    shodan-query: oracle port:1521
  tags: js,network,oracle,info,enum

javascript:
  - code: |
      let m = require('nuclei/oracle');
      let response = m.IsOracle(Host,Port);
      Export(response);

    args:
      Host: "{{Host}}"
      Port: "1521"

    matchers:
      - type: dsl
        dsl:
          - 'success == true'
          - 'contains(response, "\"IsOracle\": true")'
        condition: and
# digest: 4b0a00483046022100e20783a952bf4c438cc2a461129f68b3ac8e214b6bba82d112b915951ed54162022100a504f17e913f06a86e8d3fa8903ab07a8e084d0096a7b6284d60169b2e4f5b23:922c64590222798bb761d5b6d8e72950