Web Server Detection (HTTP/3)

#TRUSTED 54997bf7ef21c4950ecdfd33aede74afa609534e238b35a8aac8dd91ec108382c4f8db5347fa0a0eda21d64f3219399f48477d37b2018ce7bbec7942a3e2f7c9c703f7a8c7fe70fde7ff3c6afaa8e7259cbed5d79da8e9e634c09ac0c401a945c769401e5dc93cb0feea47936ebc61be313de3c4a6e9eed9565767b15d4558bc879aa12777097d7ae7cd54de9ecfb37ca3c921aef62516c7a7a3c4f7fb754d7c53b5db00f2ab4340c2286f4677a50e50cd9a8382e37bd49c2fbc932c703593f0e6d34594a4cf6588e8647881a0946678125825c2276a9c85ba97bc51d31b5e127af201f4c24f9195421da3cb812d9f0688cfe855da26892ff93d8ba793a1db56ec36c5fb962ce869e1871630aeab5e3244baeedc5da0565d9dc3c665e9a15c6f5c13510d4b4fc57e0ea9371407154e6c42d9fb37f5cb2cf981c00782025cfef4e80851eb0fc0ce61181a036445311c68d618fcfb7d5fda242069ee73ed6fad60dcc4682db90fe5da35413a001df7b112bea759244b456246a76d94ff00a30e7b931224762727d0b3b47aedff086fb762913e1517d0232b492e4e9d29119c02e75753973fcbce5c0c905ae1de5571a24df30f5ff07fb75a731a15c0ad2da334a9808ddc233bfcb935d8702dcd32fba6c059f95d353014330e25a5577113702ab530b74a63a7b206974dea0206281980e0c8fbfa8014f2c2bde3927272f3e8bf5d
#TRUST-RSA-SHA256 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
#%NASL_MIN_LEVEL 80900
#TRUST-RSA-SHA256

#%NASL_MIN_LEVEL 70300
#
# (C) Tenable Network Security, Inc.
#
#

# @PREFERENCES@

include 'deprecated_nasl_level.inc';
include "compat.inc";

if (description)
{
  script_id(333917);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/10");

  script_name(english:"Web Server Detection (HTTP/3)");

  script_set_attribute(
    attribute:"synopsis",
    value:"An HTTP/3-enabled web server is running on this port."
  );
  script_set_attribute(
    attribute:"description",
    value:
      'Nessus was able to detect that the remote service supports HTTP/3 by\n'
      'sending an HTTP/3 request and receiving a valid response in reply.'
  );
  script_set_attribute(attribute:"solution",value:"n/a");
  script_set_attribute(attribute:"risk_factor", value:"None");

  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/10");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Service detection");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("quic_detect.nasl");

  exit(0);
}

include 'http3.inc';

var ports = keys(get_kb_list('Services/QUIC/*'));
if (empty_or_null(ref:ports))
  audit(AUDIT_NOT_DETECT, 'QUIC');

if (!thorough_tests)
  dbg::detailed_log(
    src:SCRIPT_NAME,
    lvl:3,
    msg:'Thorough tests are not enabled, plugin 206982 (quic_detect.nasl) may not have detected all QUIC-enabled ports.'
  );

var response;
for (var port of ports)
{
  port = int(substr(port, 14));
  if (!port)
    continue;

  response = http3::get_response(
    item:'/',
    method:http::GET,
    port:port
  );

  if (isnull(response))
    continue;

  register_service(port:port, proto:"www", ipproto:"udp");
  replace_kb_item(name:'http/30/' + port, value:true);
  security_note(port);
}