id: telnet-service-misconfiguration

info:
  name: Check for Misconfigured Telnet Service
  author: princechaddha
  severity: high
  description: Checks if the Telnet service is misconfigured.
  impact: |
    Misconfigured Telnet service can lead to security vulnerabilities.
  remediation: |
    Ensure Telnet service is either properly configured or disabled.
  tags: windows,telnet,service,misconfigured,code,windows-audit

self-contained: true

code:
  - pre-condition: |
      IsWindows();
    engine:
      - powershell.exe
    args:
      - -ExecutionPolicy
      - Bypass
    pattern: "*.ps1"
    source: |
      $service = Get-Service Telnet -ErrorAction SilentlyContinue;
      if ($service -and $service.Status -ne 'Running') { Write-Output 'Misconfigured' }

    matchers:
      - type: word
        words:
          - "Misconfigured"
# digest: 4b0a00483046022100ec5aa98b6d57d71190c8553d25c522a6710021a83381b77fbd757416346e77c0022100acb2bb7ff1e41904d838c0f985309e81af6e1831f2b22cc24364bcd75d6eec11:922c64590222798bb761d5b6d8e72950