Files
nuclei-templates/network/detection/clamav-detect.yaml
2024-12-01 13:57:55 +00:00

30 lines
825 B
YAML

id: clamav-detect
info:
name: ClamAV Server Detect
author: pussycat0x
severity: info
description: |
Clam AntiVirus is a free software, cross-platform antimalware toolkit able to detect many types of malware, including viruses.
metadata:
verified: true
max-request: 1
shodan-query: port:3310 product:"ClamAV"
tags: network,clamav,detect,detection,tcp
tcp:
- inputs:
- data: "VERSION"
host:
- "{{Hostname}}"
port: 3310
matchers:
- type: regex
regex:
- 'ClamAV ([0-9.]+)'
extractors:
- type: regex
regex:
- "ClamAV ([0-9.]+)"
# digest: 4a0a004730450221009d4712dcf154784d224752976a5279784b7f159bc75b3802896505aaaa5793d702204da14c4548e57050d8b4713c899b87da3b175f90c73895fd82d5a4a27dcfee70:922c64590222798bb761d5b6d8e72950