Files
nuclei-templates/network/detection/bluecoat-telnet-proxy-detect.yaml
2025-11-14 17:43:55 +00:00

32 lines
1.0 KiB
YAML

id: bluecoat-telnet-proxy-detect
info:
name: BlueCoat Telnet Proxy - Detect
author: righettod
severity: info
description: |
Detects Blue Coat telnet proxy services.
reference:
- https://en.wikipedia.org/wiki/Blue_Coat_Systems
- https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-3/about-ssl-proxy.html
- https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-3.html
metadata:
verified: true
max-request: 1
tags: network,telnet,bluecoat,proxy,detect,detection,tcp,discovery
tcp:
- inputs:
- data: "\r\n"
read: 1024
host:
- "{{Hostname}}"
port: 23
read-size: 4096
matchers:
- type: word
part: data
words:
- "Blue Coat telnet proxy"
# digest: 4b0a00483046022100b0955f0cdb0a2347e2267eec96cafd269348b22c5a2106ad2d319bd971e09604022100df4f197fca1e7abbd8731b7d79aacbba870f97ae7b79ec006cf59be7834e6a37:922c64590222798bb761d5b6d8e72950