nuclei-templates/technologies/apache/tomcat-detect.yaml

32 lines
674 B
YAML
Raw Normal View History

2021-09-10 05:54:16 +00:00
id: tomcat-detect
2021-09-09 13:38:13 +00:00
2020-09-22 21:26:52 +00:00
info:
2021-09-10 05:54:16 +00:00
name: Tomcat Version Detect
2020-09-22 21:26:52 +00:00
author: philippedelteil
2021-09-09 13:38:13 +00:00
description: If an Tomcat instance is deployed on the target URL, when we send a request for a non existent resource we receive a Tomcat error page with version.
2020-09-22 21:26:52 +00:00
severity: info
2021-09-09 13:38:13 +00:00
tags: tech,tomcat,apache
2020-09-22 21:26:52 +00:00
requests:
- method: GET
path:
- "{{BaseURL}}/something_not_existing_"
matchers-condition: and
matchers:
2020-09-24 18:16:21 +00:00
2020-09-22 21:26:52 +00:00
- type: word
words:
- "Apache Tomcat"
2020-09-24 18:16:21 +00:00
2020-09-22 21:26:52 +00:00
- type: status
status:
- 404
2020-09-24 18:16:21 +00:00
2020-09-22 21:26:52 +00:00
extractors:
- type: regex
part: body
name: version
2020-09-24 01:34:05 +00:00
group: 2
2020-09-24 18:16:21 +00:00
regex:
2021-09-10 05:54:16 +00:00
- '(<h3>)(.*?)(</h3>)'