102479690.yaml

id: http
info:
  name: LG Smart TV Rights Object Acquisition Protocol
  author: nmap,cn-kali-team
  tags: detect,tech,http,service
  severity: info
  metadata:
    device_type: media device
    fallback:
    - get-request
    rarity: 6
tcp:
- name: four-oh-four-request
  inputs:
  - data: GET /nice%20ports%2C/Tri%6Eity.txt%2ebak HTTP/1.0\r\n\r\n
  host:
  - '{{Hostname}}'
  port: 88,2100,9999,49152,80-85,8000-8010,8080-8085,8880-8888
  extractors:
  - name: http
    type: regex
    regex:
    - '^HTTP/1\.1 401 Unauthorized\r\nServer: LG ROAP Server\r\nPragma: no-cache\r\nCache-Control: no-store, no-cache, must-revalidate\r\nConnection: Close\r\nContent-Length: \d+\r\nContent-Type: application/atom\+xml; charset=utf-8\r\n\r\n<\?xml version=\"1\.0\" encoding=\"utf-8\"\?><envelope><ROAPError>401</ROAPError><ROAPErrorDetail>Unauthorized</ROAPErrorDetail></envelope>$'