Files
nuclei-templates/network/detection/clamav-detect.yaml
2025-10-26 16:17:37 +00:00

30 lines
833 B
YAML

id: clamav-detect
info:
name: ClamAV Server Detect
author: pussycat0x
severity: info
description: |
Clam AntiVirus is a free software, cross-platform antimalware toolkit able to detect many types of malware, including viruses.
metadata:
verified: true
max-request: 1
shodan-query: port:3310 product:"ClamAV"
tags: network,clamav,detect,detection,tcp,discovery
tcp:
- inputs:
- data: "VERSION"
host:
- "{{Hostname}}"
port: 3310
matchers:
- type: regex
regex:
- 'ClamAV ([0-9.]+)'
extractors:
- type: regex
regex:
- "ClamAV ([0-9.]+)"
# digest: 490a0046304402203f7d096379013666f9776712408d220eea21e96ab0c24f81ef35d9bd36383c56022076603ecf6082da6b9762bd417a42b0a31fc6632412c88694ec09f9e12e12c735:922c64590222798bb761d5b6d8e72950