nuclei-templates/http/technologies/kong-detect.yaml

id: kong-detect

info:
  name: Detect Kong
  author: geeknik,joshlarsen
  severity: info
  description: The Cloud-Native API Gateway
  reference:
    - https://github.com/Kong/kong
  metadata:
    max-request: 1
  tags: tech,kong

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        part: header
        words:
          - "server: kong"
          - "x-kong-response-latency"
          - "x-kong-upstream-latency"
          - "x-kong-proxy-latency"
        condition: or
        case-insensitive: true

    extractors:
      - type: kval
        kval:
          - server
# digest: 4b0a004830460221008892006c7fa2169c38b7c078d43aba8f296b947ef9ea53f6c1d05172ed4f76b5022100a713286f70f75abe1fc675679eb5c7dcb9f01d194ff09de089ab21c55f843a6e:922c64590222798bb761d5b6d8e72950
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`id: kong-detect`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`info:`
			`name: Detect Kong`
Detect more Kong headers (#4406) * Detect more Kong headers * simplified template with case-insensitive word matchers Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-05-16 16:06:55 +00:00			`author: geeknik,joshlarsen`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`severity: info`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`description: The Cloud-Native API Gateway`
			`reference:`
			`- https://github.com/Kong/kong`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
			`max-request: 1`
templateman update 2023-10-14 11:27:55 +00:00			`tags: tech,kong`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`- method: GET`
			`path:`
Preparing for request clustering 2021-01-13 07:31:46 +00:00			`- "{{BaseURL}}"`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00
			`matchers:`
Detect more Kong headers (#4406) * Detect more Kong headers * simplified template with case-insensitive word matchers Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-05-16 16:06:55 +00:00			`- type: word`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`part: header`
Detect more Kong headers (#4406) * Detect more Kong headers * simplified template with case-insensitive word matchers Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-05-16 16:06:55 +00:00			`words:`
			`- "server: kong"`
			`- "x-kong-response-latency"`
Typo update 2022-05-16 18:05:31 +00:00			`- "x-kong-upstream-latency"`
Detect more Kong headers (#4406) * Detect more Kong headers * simplified template with case-insensitive word matchers Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-05-16 16:06:55 +00:00			`- "x-kong-proxy-latency"`
			`condition: or`
			`case-insensitive: true`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00
			`extractors:`
Update kong-detect.yaml False Positive Before: `[2021-05-04 18:16:57] [kong-detect] [http] [info] https://hongkong.reddit.com:443 [Location: https://www.reddit.com/r/hongkong/]` After: `[INF] No results found. Better luck next time!` Actual Kong server: `[2021-05-04 18:22:52] [kong-detect] [http] [info] https://xxx.xxx.xxx.xxx/ [kong/2.0.5]` 2021-05-04 23:23:33 +00:00			`- type: kval`
			`kval:`
Typo update 2022-05-16 18:05:31 +00:00			`- server`
Auto Template Signing [Thu Oct 19 13:13:50 UTC 2023] :robot: 2023-10-19 13:13:52 +00:00			`# digest: 4b0a004830460221008892006c7fa2169c38b7c078d43aba8f296b947ef9ea53f6c1d05172ed4f76b5022100a713286f70f75abe1fc675679eb5c7dcb9f01d194ff09de089ab21c55f843a6e:922c64590222798bb761d5b6d8e72950`