Skip to content

Jabber XMPP Protocol - Detect

ID: detect-jabber-xmpp

Severity: info

Author: geeknik

Tags: network,jabber,xmpp,messaging,detect,detection,tcp

Jabber XMPP protocol was detected.

id: detect-jabber-xmpp
info:
name: Jabber XMPP Protocol - Detect
author: geeknik
severity: info
description: Jabber XMPP protocol was detected.
reference:
- https://datatracker.ietf.org/doc/html/rfc6120
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
metadata:
max-request: 1
tags: network,jabber,xmpp,messaging,detect,detection,tcp
tcp:
- inputs:
- data: "a\n"
host:
- "{{Hostname}}"
port: 5222
matchers:
- type: word
words:
- "stream:stream xmlns:stream"
- "stream:error xmlns:stream"
condition: or
# digest: 4a0a00473045022100bc283a7e1a9b45abcb6eff582a50cdb1e6532f9414b953639dfcec6e9935def7022034be6a863204483510076470e2a84bf5d4fe85fa6e338e484ec724febc7dfa60:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "network/detection/detect-jabber-xmpp.yaml"

View on Github