id: smb-v1-supported

info:
  name: SMB v1 Supported - Detection
  author: pussycat0x
  severity: info
  description: |
    This indicates that the system or application possesses the functionality to operate with SMB version 1. Supporting SMBv1 enables the system to engage in communication utilizing the SMB protocol at its version 1.0.
  reference:
    - https://kb.iu.edu/d/aumn
  metadata:
    verified: true
    shodan-query: "port:445"
  tags: js,network,smb,enum,discovery

javascript:
  - code: |
      var m = require("nuclei/smb");
      var c = m.SMBClient();
      var response = c.ConnectSMBInfoMode(Host, Port);
      to_json(response);

    args:
      Host: "{{Host}}"
      Port: "445"

    matchers:
      - type: word
        words:
          - '"SupportV1": true'
# digest: 4b0a00483046022100b8ed237b3bab5cebf75d68e3c7a18999b6e575737fff71003f58f6df32b99622022100c899c32b1f55041673d0ae75d56113ef520449e702b4badbfd5143d7073411e7:922c64590222798bb761d5b6d8e72950