Files
nuclei-templates/network/detection/rsyncd-service-detect.yaml
2025-10-26 16:17:37 +00:00

37 lines
900 B
YAML

id: rsyncd-service-detect
info:
name: Rsyncd Service - Detect
author: vsh00t,geeknik
severity: info
description: |
Rsyncd service was detected.
reference:
- https://linux.die.net/man/1/rsync
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
metadata:
max-request: 1
tags: network,rsyncd,detect,detection,tcp,discovery
tcp:
- inputs:
- data: "?\r\n"
host:
- "{{Hostname}}"
port: 873
matchers:
- type: word
words:
- "RSYNCD: "
- "ERROR: protocol startup error"
condition: and
extractors:
- type: regex
regex:
- 'RSYNCD: \d\d.\d'
# digest: 4b0a004830460221008aff12cd416ddbafda78e66430ce41f3b38036221e7338fc51c414f508f0da080221009198660b8c2694314c266e536a19e660410b67cac49725f3f1d5843032db5aaa:922c64590222798bb761d5b6d8e72950