id: tnftpd-detect

info:
  name: TNFTPD Service - Detect
  author: pussycat0x
  severity: info
  description: |
    TNFTPD Service service was detected.
  metadata:
    verified: true
    max-request: 1
    shodan-query:
      - "tnftpd"
  tags: network,ftp,tnftpd,detect,detection,tcp,discovery

tcp:
  - inputs:
      - data: 00000000
        type: hex

    host:
      - "{{Hostname}}"
    port: 21
    read-size: 1024

    matchers:
      - type: word
        words:
          - "FTP server (tnftpd"

    extractors:
      - type: regex
        group: 1
        name: version
        regex:
          - 'tnftpd ([0-9]+)'
# digest: 4b0a00483046022100f842ae8ab46ec145b78b0598038f6e6d03a7fcc850d8c128fbf4e11602f6d824022100b2d5759668f39f4e02d7080a59a36738ef040311268210066a4ee58f05de8051:922c64590222798bb761d5b6d8e72950