28 lines
935 B
YAML
28 lines
935 B
YAML
|
id: atlassian-connect-descriptor
|
||
|
|
||
|
info:
|
||
|
name: Atlassian Connect Descriptor - Detect
|
||
|
author: pussycat0x
|
||
|
severity: info
|
||
|
description: |
|
||
|
The app descriptor is a JSON file ( atlassian-connect. json ) that describes the app to the Atlassian application. The descriptor includes general information for the app, as well as the modules that the app wants to use or extend.
|
||
|
reference:
|
||
|
- https://developer.atlassian.com/cloud/jira/platform/connect-app-descriptor/
|
||
|
metadata:
|
||
|
shodan-query: atlassian-connect.json
|
||
|
verified: true
|
||
|
max-request: 1
|
||
|
tags: atlassian,tech
|
||
|
|
||
|
http:
|
||
|
- method: GET
|
||
|
path:
|
||
|
- "{{BaseURL}}/atlassian-connect.json"
|
||
|
|
||
|
matchers:
|
||
|
- type: dsl
|
||
|
dsl:
|
||
|
- 'status_code == 200'
|
||
|
- 'contains(body, "name") && contains(body, "vendor") && contains(body, "key") && contains(body, "baseUrl")'
|
||
|
# - 'contains(content_type, "text/html")'
|
||
|
condition: and
|