v9.5.8

projectdiscovery/nuclei-templatesv9.5.8Jul 18, 2023by princechaddha

AI Summary

Adds a collection of JARM-based Command and Control (C2) server detection templates and numerous CVE and token exposure templates.

Key Highlights

  • JARM-based detection for 14 different C2 frameworks including Cobalt Strike, Sliver, and Merlin
  • 113 new templates added
  • 9 new CVEs added
  • Extensive token exposure templates for services like Discord, Bitbucket, and Coinbase

New Features

  • JARM-based C2 detection templates
  • CVE detection templates
  • Token exposure templates
  • Default login detection

Full Release Notes

🔥 Highlight of this release:

This release adds a collection of C2 server detection templates. These templates can be used for automating the identification and classification of various C2 servers based on their JARM fingerprints. 

- network/jarm/c2/cobalt-strike-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/covenant-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/deimos-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/evilginx2-jarm.yaml by @pussycat0x
- network/jarm/c2/grat2-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/mac-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/macshell-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/merlin-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/metasploit-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/mythic-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/posh-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/shad0w-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/silenttrinity-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/sliver-c2-jarm.yaml by @pussycat0x

## What's Changed

### New Templates Added : `113`
### New CVEs Added: `9`

- http/cves/2023/CVE-2023-37270.yaml by @ritikchaddha
- http/cves/2023/CVE-2023-28665.yaml by Aaban SOlutions,@harsh
- http/cves/2023/CVE-2023-23491.yaml by @ritikchaddha
- http/cves/2023/CVE-2023-3460.yaml by @DhiyaneshDk 🔥
- http/cves/2023/CVE-2023-3345.yaml by @DhiyaneshDK
- http/cves/2023/CVE-2023-1546.yaml by Harsh
- http/cves/2023/CVE-2023-0448.yaml by @ritikchaddha
- http/cves/2020/CVE-2020-17463.yaml by @Thirukrishnan
- http/cves/2017/CVE-2017-7925.yaml by @E1A,none
- http/default-logins/yealink/yealink-default-login.yaml by parzival
- http/exposed-panels/anaqua-login-panel.yaml by @Ep1cSage
- http/exposures/tokens/beamer/beamer-token.yaml by @DhiyaneshDK
- http/exposures/tokens/bitbucket/bitbucket-clientid.yaml by @DhiyaneshDK
- http/exposures/tokens/bitbucket/bitbucket-clientsecret.yaml by @DhiyaneshDK
- http/exposures/tokens/bittrex/bittrex-accesskey.yaml by @DhiyaneshDK
- http/exposures/tokens/bittrex/bittrex-secretkey.yaml by @DhiyaneshDK
- http/exposures/tokens/clojars/clojars-token.yaml by @DhiyaneshDK
- http/exposures/tokens/codecov/codecov-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/coinbase/coinbase-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/confluent/confluent-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/confluent/confluent-secretkey.yaml by @DhiyaneshDK
- http/exposures/tokens/contentful/contentful-token.yaml by @DhiyaneshDK
- http/exposures/tokens/databricks/databricks-token.yaml by @DhiyaneshDK
- http/exposures/tokens/datadog/datadog-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/discord/discord-clientid.yaml by @DhiyaneshDK
- http/exposures/tokens/discord/discord-clientsecret.yaml by @DhiyaneshDK
- http/exposures/tokens/discord/discord-token.yaml by @DhiyaneshDK
- http/exposures/tokens/doppler/doppler-token.yaml by @DhiyaneshDK
- http/exposures/tokens/droneci/droneci-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/dropbox/dropbox-long-token.yaml by @DhiyaneshDK
- http/exposures/tokens/dropbox/dropbox-short-token.yaml by @DhiyaneshDK
- http/exposures/tokens/dropbox/dropbox-token.yaml by @DhiyaneshDK
- http/exposures/tokens/duffel/duffel-token.yaml by @DhiyaneshDK
- http/exposures/tokens/easypost/easypost-testtoken.yaml by @DhiyaneshDK
- http/exposures/tokens/easypost/easypost-token.yaml by @DhiyaneshDK
- http/exposures/tokens/etsy/etsy-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/facebook/facebook-token.yaml by @DhiyaneshDK
- http/exposures/tokens/fastly/fastly-token.yaml by @DhiyaneshDK
- http/exposures/tokens/finicity/finicity-clientsecret.yaml by @DhiyaneshDK
- http/exposures/tokens/finicity/finicity-token.yaml by @DhiyaneshDK
- http/exposures/tokens/finnhub/finnhub-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/flickr/flickr-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/flutter/flutterwave-encryptionkey.yaml by @DhiyaneshDK
- http/exposures/tokens/flutter/flutterwave-publickey.yaml by @DhiyaneshDK
- http/exposures/tokens/flutter/flutterwave-secretkey.yaml by @DhiyaneshDK
- http/exposures/tokens/frameio/frameio-token.yaml by @DhiyaneshDK
- http/exposures/tokens/freshbooks/freshbooks-accesstoken.yaml by @DhiyaneshDK
- http/exposures/tokens/gitter/gitter-token.yaml by @DhiyaneshDK
- http/exposures/tokens/gocardless/gocardless-token.yaml by @DhiyaneshDK
- http/exposures/tokens/grafana/grafana-cloud-token.yaml by @DhiyaneshDK
- http/exposures/tokens/grafana/grafana-key.yaml by @DhiyaneshDK
- http/exposures/tokens/grafana/grafana-serviceaccount-token.yaml by @DhiyaneshDK
- http/exposures/tokens/hashicorp/hashicorp-token.yaml by @DhiyaneshDK
- http/exposures/tokens/zendesk/zendesk-key.yaml by @DhiyaneshDK
- network/jarm/c2/cobalt-strike-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/covenant-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/deimos-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/evilginx2-jarm.yaml by @pussycat0x
- network/jarm/c2/grat2-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/mac-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/macshell-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/merlin-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/metasploit-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/mythic-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/posh-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/shad0w-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/silenttrinity-c2-jarm.yaml by @pussycat0x
- network/jarm/c2/sliver-c2-jarm.yaml by @pussycat0x
- http/miscellaneous/spnego-detect.yaml by @lady_bug,ruppde
- http/technologies/graylog/graylog-api-exposure.yaml by Arqsz
- file/keys/beamer-api-token.yaml by @DhiyaneshDK
- file/keys/bitbucket/bitbucket-client-id.yaml by @DhiyaneshDK
- file/keys/bitbucket/bitbucket-client-secret.yaml by @DhiyaneshDK
- file/keys/bittrex/bittrex-access-key.yaml by @DhiyaneshDK
- file/keys/bittrex/bittrex-secret-key.yaml by @DhiyaneshDK
- file/keys/clojars-api-token.yaml by @DhiyaneshDK
- file/keys/codecov-access-token.yaml by @DhiyaneshDK
- file/keys/coinbase-access-token.yaml by @DhiyaneshDK
- file/keys/confluent/confluent-access-token.yaml by @DhiyaneshDK
- file/keys/confluent/confluent-secret-token.yaml by @DhiyaneshDK
- file/keys/contentful-api-token.yaml by @DhiyaneshDK
- file/keys/databricks-api-token.yaml by @DhiyaneshDK
- file/keys/datadog-access-token.yaml by @DhiyaneshDK
- file/keys/discord/discord-api-token.yaml by @DhiyaneshDK
- file/keys/discord/discord-cilent-secret.yaml by @DhiyaneshDK
- file/keys/discord/discord-client-id.yaml by @DhiyaneshDK
- file/keys/doppler-api-token.yaml by @DhiyaneshDK
- file/keys/droneci-access-token.yaml by @DhiyaneshDK
- file/keys/dropbox/dropbox-api-token.yaml by @DhiyaneshDK
- file/keys/dropbox/dropbox-longlived-token.yaml by @DhiyaneshDK
- file/keys/dropbox/dropbox-shortlived-token.yaml by @DhiyaneshDK
- file/keys/duffel-api-token.yaml by @DhiyaneshDK
- file/keys/easypost/easypost-api-token.yaml by @DhiyaneshDK
- file/keys/easypost/easypost-test-token.yaml by @DhiyaneshDK
- file/keys/etsy-access-token.yaml by @DhiyaneshDK
- file/keys/facebook/facebook-api-token.yaml by @DhiyaneshDK
- file/keys/fastly-api-token.yaml by @DhiyaneshDK
- file/keys/finicity/finicity-api-token.yaml by @DhiyaneshDK
- file/keys/finicity/finicity-client-secret.yaml by @DhiyaneshDK
- file/keys/finnhub-access-token.yaml by @DhiyaneshDK
- file/keys/flickr-access-token.yaml by @DhiyaneshDK
- file/keys/flutter/flutterwave-encryption-key.yaml by @DhiyaneshDK
- file/keys/flutter/flutterwave-public-key.yaml by @DhiyaneshDK
- file/keys/flutter/flutterwave-secret-key.yaml by @DhiyaneshDK
- file/keys/frameio-api-token.yaml by @DhiyaneshDK
- file/keys/freshbooks-access-token.yaml by @DhiyaneshDK
- file/keys/gitter-access-token.yaml by @DhiyaneshDK
- file/keys/gocardless-api-token.yaml by @DhiyaneshDK
- file/keys/grafana/grafana-api-key.yaml by @DhiyaneshDK
- file/keys/grafana/grafana-cloud-api-token.yaml by @DhiyaneshDK
- file/keys/grafana/grafana-service-account-token.yaml by @DhiyaneshDK
- file/keys/hashicorp-api-token.yaml by @DhiyaneshDK
- file/keys/zendesk-secret-key.yaml by @DhiyaneshDK

## New Contributors
* @MalavikaSK made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6514
* @FreeZeroDays made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7691
* @bob-the-builder-v made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7602
* @Thirukrishnan made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/7705
* @TheArqsz made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/6963

**Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.5.7...v9.5.8