id: clamav-detect

info:
  name: ClamAV Server Detect
  author: pussycat0x
  severity: info
  description: |
    Clam AntiVirus is a free software, cross-platform antimalware toolkit able to detect many types of malware, including viruses.
  metadata:
    verified: true
    max-request: 1
    shodan-query: port:3310 product:"ClamAV"
  tags: network,clamav,detect,detection,tcp,discovery
tcp:
  - inputs:
      - data: "VERSION"
    host:
      - "{{Hostname}}"
    port: 3310

    matchers:
      - type: regex
        regex:
          - 'ClamAV ([0-9.]+)'

    extractors:
      - type: regex
        regex:
          - "ClamAV ([0-9.]+)"
# digest: 490a0046304402203f7d096379013666f9776712408d220eea21e96ab0c24f81ef35d9bd36383c56022076603ecf6082da6b9762bd417a42b0a31fc6632412c88694ec09f9e12e12c735:922c64590222798bb761d5b6d8e72950