1024681271.yaml

id: upnp
info:
  name: dnt IPdio radio UPnP
  author: nmap,cn-kali-team
  tags: detect,tech,upnp,service
  severity: info
  metadata:
    device_type: media device
    info: UPnP $1; DLNADOC $3
    rarity: 1
    version: $2
tcp:
- name: generic-lines
  inputs:
  - data: \r\n\r\n
  host:
  - '{{Hostname}}'
  port: 21,23,35,43,79,98,110,113,119,199,214,264,449,505,510,540,587,616,628,666,731,771,782,1000,1010,1080,1212,1220,1248,1302,1400,1432,1467,1501,1505,1666,2010,2024,2600,3000,3005,3128,3310,3333,3940,4155,5000,5400,5432,5555,5570,6112,6432,7144,7145,7200,7780,8000,8138,9801,11371,11965,13720,18086,19150,26214,26470,31416,30444,34012,56667,1040-1043,1687-1688,6667-6670,9000-9003,15000-15002
  extractors:
  - name: upnp
    type: regex
    regex:
    - '^HTTP/1\.1 400 Bad request\r\nServer: Reciva UPnP/([\w._-]+) Radio/([\w._-]+) DLNADOC/([\w._-]+)\r\nContent-length: 0\r\nConnection: close\r\n\r\n$'