-
Notifications
You must be signed in to change notification settings - Fork 25
/
Copy path1025123525.yaml
26 lines (26 loc) · 1015 Bytes
/
1025123525.yaml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
id: upnp
info:
name: MiniDLNA
author: nmap,cn-kali-team
tags: detect,tech,upnp,service
severity: info
metadata:
info: SUSE Linux; DLNADOC $1; UPnP $2
operating_system: Linux
product: minidlna
rarity: 1
vendor: minidlna
verified: true
version: $3
tcp:
- name: generic-lines
inputs:
- data: \r\n\r\n
host:
- '{{Hostname}}'
port: 21,23,35,43,79,98,110,113,119,199,214,264,449,505,510,540,587,616,628,666,731,771,782,1000,1010,1080,1212,1220,1248,1302,1400,1432,1467,1501,1505,1666,2010,2024,2600,3000,3005,3128,3310,3333,3940,4155,5000,5400,5432,5555,5570,6112,6432,7144,7145,7200,7780,8000,8138,9801,11371,11965,13720,18086,19150,26214,26470,31416,30444,34012,56667,1040-1043,1687-1688,6667-6670,9000-9003,15000-15002
extractors:
- name: upnp
type: regex
regex:
- '^HTTP/1\.1 501 Not Implemented\r\nContent-Type: text/html\r\nConnection: close\r\nContent-Length: 149\r\nServer: SUSE LINUX/n/a DLNADOC/([\w._-]+) UPnP/([\w._-]+) MiniDLNA/([\w._-]+)\r\n'