Files
nuclei-templates/network/detection/bluecoat-telnet-proxy-detect.yaml
2024-12-01 13:57:55 +00:00

32 lines
1011 B
YAML

id: bluecoat-telnet-proxy-detect
info:
name: BlueCoat Telnet Proxy - Detect
author: righettod
severity: info
description: |
Detects Blue Coat telnet proxy services.
reference:
- https://en.wikipedia.org/wiki/Blue_Coat_Systems
- https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-3/about-ssl-proxy.html
- https://techdocs.broadcom.com/us/en/symantec-security-software/web-and-network-security/edge-swg/7-3.html
metadata:
verified: true
max-request: 1
tags: network,bluecoat,proxy,detect,detection,tcp
tcp:
- inputs:
- data: "\r\n"
read: 1024
host:
- "{{Hostname}}"
port: 23
read-size: 4096
matchers:
- type: word
part: data
words:
- "Blue Coat telnet proxy"
# digest: 4b0a00483046022100889409ab337262aac0037045a27e1e8199bab92365fd361ad28a72a80d28d265022100ff834236512292825a899207a411db89cc0c96949f74d28c5d2109179bdd4280:922c64590222798bb761d5b6d8e72950