id: sap-router

info:
  name: SAPRouter Detection
  author: randomstr1ng
  severity: info
  description: |
    SAProuter is a software application that provides a remote connection between our customer's network and SAP.
  metadata:
    max-request: 1
  tags: network,sap,detect,saprouter,detection,tcp,discovery

tcp:
  - inputs:
      - data: 57484f415245594f553f0a
        type: hex

    host:
      - "{{Hostname}}"
    port: 3299
    read-size: 1024

    matchers:
      - type: word
        words:
          - "SAProuter"
# digest: 4a0a00473045022100e336545b3a2980e36a387bce2bda7c2c69e96cff95274883cd0bc577a1462d3102200b08dad384b6dcc5e5e34b64e258b551ec32c4b556592a9bc846a04a298694c5:922c64590222798bb761d5b6d8e72950