id: apache-dubbo-unauth

info:
  name: Apache Dubbo - Unauthenticated Access
  author: j4vaovo
  severity: high
  description: |
    Apache Dubbo Unauthenticated Access were detected.
  reference:
    - https://dubbo.apache.org/en/docs3-v2/java-sdk/advanced-features-and-usage/security/auth/
  metadata:
    verified: true
    max-request: 1
    fofa-query: apache dubbo
  tags: network,dubbo,apache,unauth,misconfig,tcp
tcp:
  - inputs:
      - data: "68656c700d0a"
        type: hex

    host:
      - "{{Hostname}}"
    port: 20880
    read-size: 2048

    matchers:
      - type: word
        words:
          - "trace [service] [method] [times]"
# digest: 4a0a00473045022004f73372fe5bde10f33e5a797084520c909a68ae77c777948ec3bcd5013e753d022100a2e3eba660956c2578c3b6e0caa0e258025fca91e1414b86e0ad5a92c048c4cd:922c64590222798bb761d5b6d8e72950