id: nimplant-c2

info:
  name: NimPlant C2 Server - Detect
  author: ja1sh
  severity: info
  description: |
    NimPlant is an open source light first-stage C2 implant written in Nim and Python. It is designed to be used as a starting point for those who want to develop their own custom C2 implants. NimPlant is fully customizable and lightweight, making it easy to integrate into existing C2 frameworks.
  reference:
    - https://github.com/chvancooten/NimPlant
  metadata:
    verified: true
    max-request: 1
    shodan-query: "nimplant C2 server"
  tags: tech,nimplant,c2,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        part: header
        words:
          - "NimPlant C2 Server"
# digest: 4a0a00473045022100ec3cca7a517598e226e427ec32ce91f0a9d4933e3d69d96f5bbc3a0e3cd8e20702201625b0c2efcedd16b6261760b15b8838b335f55903b1d6c317e85df991fd1ab4:922c64590222798bb761d5b6d8e72950