nuclei-templates/http/technologies/confluence-detect.yaml

id: confluence-detect

info:
  name: Confluence Detect
  author: philippedelteil,AdamCrosser
  severity: info
  description: Allows you to detect Atlassian Confluence instances
  metadata:
    max-request: 5
    vendor: atlassian
    product: confluence_server
    shodan-query: http.component:"Atlassian Confluence"
    category: productivity
  tags: tech,confluence,atlassian,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}/dologin.action"
      - "{{BaseURL}}"
      - "{{BaseURL}}/pages"
      - "{{BaseURL}}/confluence"
      - "{{BaseURL}}/wiki"

    host-redirects: true
    stop-at-first-match: true

    matchers-condition: or
    matchers:
      - type: word
        part: header
        words:
          - '-confluence-'
        case-insensitive: true

      - type: word
        part: body
        words:
          - 'confluence-base-url'

    extractors:
      - type: regex
        name: version
        part: body
        group: 1
        regex:
          - '<meta name="ajs-version-number" content="(.*)">'
          - 'Atlassian Confluence ([a-z0-9-._]+)'

      - type: kval
        kval:
          - version
Update and rename confluence-detector.yaml to confluence-detect.yaml 2021-09-09 06:01:44 +00:00			`id: confluence-detect`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00
			`info:`
Update and rename confluence-detector.yaml to confluence-detect.yaml 2021-09-09 06:01:44 +00:00			`name: Confluence Detect`
Update Confluence Detection Templates With Version Extraction Logic (#7460) * Update Confluence Version * Added Application Category * misc update * order revert --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-06-16 19:53:27 +00:00			`author: philippedelteil,AdamCrosser`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`severity: info`
			`description: Allows you to detect Atlassian Confluence instances`
Update confluence-detect.yaml 2021-10-14 10:52:58 +00:00			`metadata:`
TemplateMan Update [Wed Jun 21 21:03:53 UTC 2023] :robot: 2023-06-21 21:03:53 +00:00			`max-request: 5`
templateman update 2023-10-14 11:27:55 +00:00			`vendor: atlassian`
TemplateMan Update [Wed Jun 21 21:03:53 UTC 2023] :robot: 2023-06-21 21:03:53 +00:00			`product: confluence_server`
added confluence metadata and minor matcher updates (#3929) 2022-03-19 10:42:08 +00:00			`shodan-query: http.component:"Atlassian Confluence"`
templateman update 2023-10-14 11:27:55 +00:00			`category: productivity`
Update Confluence Detection Templates With Version Extraction Logic (#7460) * Update Confluence Version * Added Application Category * misc update * order revert --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-06-16 19:53:27 +00:00			`tags: tech,confluence,atlassian,detect`
added confluence metadata and minor matcher updates (#3929) 2022-03-19 10:42:08 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`- method: GET`
			`path:`
Update Confluence Detection Templates With Version Extraction Logic (#7460) * Update Confluence Version * Added Application Category * misc update * order revert --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-06-16 19:53:27 +00:00			`- "{{BaseURL}}/dologin.action"`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`- "{{BaseURL}}"`
			`- "{{BaseURL}}/pages"`
			`- "{{BaseURL}}/confluence"`
			`- "{{BaseURL}}/wiki"`

Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491) 2022-10-07 21:27:25 +00:00			`host-redirects: true`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`stop-at-first-match: true`
templateman update 2023-10-14 11:27:55 +00:00
added confluence metadata and minor matcher updates (#3929) 2022-03-19 10:42:08 +00:00			`matchers-condition: or`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`matchers:`
			`- type: word`
added confluence metadata and minor matcher updates (#3929) 2022-03-19 10:42:08 +00:00			`part: header`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`words:`
			`- '-confluence-'`
added confluence metadata and minor matcher updates (#3929) 2022-03-19 10:42:08 +00:00			`case-insensitive: true`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00
			`- type: word`
added confluence metadata and minor matcher updates (#3929) 2022-03-19 10:42:08 +00:00			`part: body`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`words:`
			`- 'confluence-base-url'`
Update and rename confluence-detector.yaml to confluence-detect.yaml 2021-09-09 06:01:44 +00:00
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`extractors:`
			`- type: regex`
Update Confluence Detection Templates With Version Extraction Logic (#7460) * Update Confluence Version * Added Application Category * misc update * order revert --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-06-16 19:53:27 +00:00			`name: version`
Create confluence-detector.yaml 2021-09-09 04:28:04 +00:00			`part: body`
			`group: 1`
			`regex:`
Added additional extractor for version detection 2022-06-06 16:30:56 +00:00			`- '<meta name="ajs-version-number" content="(.*)">'`
Update Confluence Detection Templates With Version Extraction Logic (#7460) * Update Confluence Version * Added Application Category * misc update * order revert --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-06-16 19:53:27 +00:00			`- 'Atlassian Confluence ([a-z0-9-._]+)'`

			`- type: kval`
			`kval:`
templateman update 2023-10-14 11:27:55 +00:00			`- version`