2022-07-03 14:26:34 +00:00
|
|
|
id: cloudfoundry-detect
|
|
|
|
|
|
|
|
|
|
info:
|
2022-07-04 11:33:53 +00:00
|
|
|
name: Cloudfoundry Detect
|
2022-07-03 14:26:34 +00:00
|
|
|
author: uomogrande
|
|
|
|
|
severity: info
|
2022-07-04 11:33:53 +00:00
|
|
|
description: Detects cloudfoundry based on response headers
|
2022-07-03 14:26:34 +00:00
|
|
|
reference: https://docs.cloudfoundry.org/concepts/cf-routing-architecture.html
|
2023-04-28 08:11:21 +00:00
|
|
|
metadata:
|
|
|
|
|
max-request: 2
|
2023-10-14 11:27:55 +00:00
|
|
|
tags: cloudfoundry,tech
|
2022-07-03 14:26:34 +00:00
|
|
|
|
2023-04-27 04:28:59 +00:00
|
|
|
http:
|
2022-07-03 14:26:34 +00:00
|
|
|
- raw:
|
|
|
|
|
- |
|
|
|
|
|
GET / HTTP/1.1
|
2022-07-04 11:33:53 +00:00
|
|
|
Host: {{Hostname}}
|
2022-07-03 14:26:34 +00:00
|
|
|
# request unknown (random) route
|
|
|
|
|
- |
|
|
|
|
|
GET / HTTP/1.1
|
|
|
|
|
Host: {{randstr}}.com
|
2022-07-04 11:35:54 +00:00
|
|
|
|
2022-07-03 14:26:34 +00:00
|
|
|
stop-at-first-match: true
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
2023-06-19 21:10:30 +00:00
|
|
|
- 'contains(header, "X-Vcap-Request-Id:") || contains(header, "X-Cf-Routererror:")'
|
2023-11-27 09:19:41 +00:00
|
|
|
|
|
|
|
|
# digest: 4a0a004730450220569eab2454f8fca52f292a3b194b4c8ad1f1c8036854c1cf3cee525e598ac8c9022100b6a2e06f7237e2f954b55df0c00afd9385625658ea3d63f3f1453a1b330c1a01:922c64590222798bb761d5b6d8e72950
|
