nuclei-templates/http/technologies/sap/sap-netweaver-detect.yaml

id: sap-netweaver-detect

info:
  name: SAP NetWeaver ICM Detection
  author: randomstr1ng
  severity: info
  description: Detection of SAP NetWeaver ABAP Webserver (ICM/ICF)
  metadata:
    max-request: 1
    shodan-query: http.favicon.hash:-266008933
  tags: sap,webserver,tech

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 2
    matchers:
      - type: regex
        part: header
        regex:
          - "sap-server:"
          - "Sap-Server:"
          - "SAP NetWeaver Application Server"
        condition: or

    extractors:
      - type: kval
        part: header
        kval:
          - "server"

# digest: 4a0a0047304502205ce9bb123b742b34ca31841fd436aa2f8c05a0b05b2009420d1b047aed961323022100da4afb286a802f18d431906368ac4573c3ff8238de457b48ead1a7eee207ce73:922c64590222798bb761d5b6d8e72950
Moving files around + duplicate remove 2021-06-05 10:27:13 +00:00			`id: sap-netweaver-detect`
Updated SAP NetWeaver Detect Source - https://github.com/randomstr1ng/nuclei-sap-templates 2021-06-05 08:10:28 +00:00
Create sap-netweaver-detect.yaml 2020-05-25 10:37:40 +00:00			`info:`
Updated SAP NetWeaver Detect Source - https://github.com/randomstr1ng/nuclei-sap-templates 2021-06-05 08:10:28 +00:00			`name: SAP NetWeaver ICM Detection`
			`author: randomstr1ng`
uniform severity update 2020-08-03 21:52:00 +00:00			`severity: info`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`description: Detection of SAP NetWeaver ABAP Webserver (ICM/ICF)`
Update sap-netweaver-detect.yaml 2022-07-21 18:26:49 +00:00			`metadata:`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`max-request: 1`
Update sap-netweaver-detect.yaml 2022-07-21 18:26:49 +00:00			`shodan-query: http.favicon.hash:-266008933`
Fix tech tags in technologies folder 2022-11-14 19:45:12 +00:00			`tags: sap,webserver,tech`
Updated SAP NetWeaver Detect Source - https://github.com/randomstr1ng/nuclei-sap-templates 2021-06-05 08:10:28 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create sap-netweaver-detect.yaml 2020-05-25 10:37:40 +00:00			`- method: GET`
			`path:`
Updated SAP NetWeaver Detect Source - https://github.com/randomstr1ng/nuclei-sap-templates 2021-06-05 08:10:28 +00:00			`- "{{BaseURL}}"`

Using "host-redirects" instead of "redirects" to avoid scanning 3rd party / out of scope hosts. (#5491) 2022-10-07 21:27:25 +00:00			`host-redirects: true`
Updated SAP NetWeaver Detect Source - https://github.com/randomstr1ng/nuclei-sap-templates 2021-06-05 08:10:28 +00:00			`max-redirects: 2`
Create sap-netweaver-detect.yaml 2020-05-25 10:37:40 +00:00			`matchers:`
Update sap-netweaver-detect.yaml 2021-06-09 08:34:53 +00:00			`- type: regex`
Updated SAP NetWeaver Detect Source - https://github.com/randomstr1ng/nuclei-sap-templates 2021-06-05 08:10:28 +00:00			`part: header`
			`regex:`
			`- "sap-server:"`
			`- "Sap-Server:"`
			`- "SAP NetWeaver Application Server"`
			`condition: or`

			`extractors:`
			`- type: kval`
			`part: header`
			`kval:`
Update sap-netweaver-detect.yaml 2021-06-09 08:34:27 +00:00			`- "server"`
TemplateMan Update [Fri Oct 20 11:41:12 UTC 2023] :robot: 2023-10-20 11:41:13 +00:00
			`# digest: 4a0a0047304502205ce9bb123b742b34ca31841fd436aa2f8c05a0b05b2009420d1b047aed961323022100da4afb286a802f18d431906368ac4573c3ff8238de457b48ead1a7eee207ce73:922c64590222798bb761d5b6d8e72950`