Files
nuclei-templates/code/linux/audit/linux-rlogin-service.yaml
2025-08-28 23:41:32 +05:30

31 lines
1018 B
YAML

id: linux-rlogin-service
info:
name: rlogin Service Should Be Disabled
author: songyaeji
severity: high
description: |
Assessed the operational status of the rlogin service on the system.Running rlogin could have allowed unauthorized users to gain access or extract sensitive information, representing a significant security risk.
reference:
- https://isms.kisa.or.kr
tags: linux,local,audit,kisa,compliance
self-contained: true
code:
- engine:
- sh
- bash
source: |
if grep -i 'disable[[:space:]]*=[[:space:]]*no' /etc/xinetd.d/rlogin 2>/dev/null; then
echo "[VULNERABLE] rlogin service is enabled"
else
echo "[SAFE] rlogin service is disabled"
fi
matchers:
- type: word
part: response
words:
- "[VULNERABLE]"
# digest: 490a0046304402202308880ccc92d1cc27fe2e37b36e68c0f58f314753fe122c2557a3ab0557901502204118696bf4f908c5f634ae8f5d4032b118cccbf2941767b3c95e01fae264d699:922c64590222798bb761d5b6d8e72950