n0mad1k
c20f189d49
masscan port discovery → nmap fingerprinting → probe engine → pattern/version matching Dynamic YAML inputs: countries.yaml (country codes + CIDR resolution) and targets.yaml (fingerprint probes) RIR delegated stats for authoritative country CIDR data (no external API) Supports tcp_banner, http, https, rtsp, udp probe types Version extraction and comparison operators (<=, >=, ==, etc.) SQLite results per engagement, CSV/JSON export format-spec/ docs for generating input files externally
73 lines
1.8 KiB
YAML
73 lines
1.8 KiB
YAML
targets:
|
|
- name: "Ubuntu 24.04 SSH"
|
|
tags: [linux, ubuntu, ssh]
|
|
ports: [22]
|
|
probes:
|
|
- type: tcp_banner
|
|
patterns:
|
|
- "Ubuntu-24"
|
|
- "OpenSSH.*Ubuntu"
|
|
version_extract: "SSH-2\\.0-OpenSSH_([0-9p.]+)"
|
|
confidence: high
|
|
|
|
- name: "D-Link DIR-823X fw 240126/240802"
|
|
tags: [router, d-link, cpe, iot]
|
|
ports: [80, 443, 8080]
|
|
probes:
|
|
- type: http
|
|
path: "/"
|
|
match_in: body
|
|
patterns: ["DIR-823X"]
|
|
confidence: medium
|
|
- type: http
|
|
path: "/"
|
|
match_in: body
|
|
all_patterns: ["DIR-823X"]
|
|
patterns: ["240126", "240802"]
|
|
confidence: high
|
|
|
|
- name: "Exposed IP Camera"
|
|
tags: [camera, iot, surveillance]
|
|
ports: [80, 554, 8080, 8443, 37777, 34567]
|
|
probes:
|
|
- type: http
|
|
path: "/"
|
|
match_in: [body, headers]
|
|
patterns:
|
|
- "(?i)hikvision"
|
|
- "(?i)dahua"
|
|
- "(?i)ip.?camera"
|
|
- "(?i)ipcam"
|
|
- "(?i)webcam"
|
|
- "(?i)reolink"
|
|
- "(?i)amcrest"
|
|
- "(?i)axis"
|
|
confidence: medium
|
|
- type: rtsp
|
|
patterns: ["RTSP/1.0 200"]
|
|
confidence: medium
|
|
|
|
- name: "Cisco SD-WAN vManage <= 20.17"
|
|
tags: [cisco, sdwan, network]
|
|
ports: [443, 8443]
|
|
probes:
|
|
- type: https
|
|
path: "/dataservice/client/server"
|
|
method: GET
|
|
match_in: body
|
|
patterns: ["platformVersion"]
|
|
version_extract: '"platformVersion":"([0-9.]+)"'
|
|
version_compare:
|
|
operator: "<="
|
|
value: "20.17"
|
|
confidence: high
|
|
|
|
- name: "Open Redis"
|
|
tags: [database, redis, exposed]
|
|
ports: [6379]
|
|
probes:
|
|
- type: tcp_banner
|
|
patterns: ["redis_version"]
|
|
version_extract: "redis_version:([0-9.]+)"
|
|
confidence: high
|