2020-10-01 21:09:13 +00:00
|
|
|
id: prometheus-exporter-detect
|
|
|
|
info:
|
|
|
|
name: Prometheus exporter detect
|
2020-10-02 16:33:03 +00:00
|
|
|
author: jarijaas
|
2020-10-01 21:09:13 +00:00
|
|
|
severity: info
|
|
|
|
description: Prometheus exporter detector
|
|
|
|
|
2020-10-04 11:23:02 +00:00
|
|
|
# See https://github.com/prometheus/prometheus/wiki/Default-port-allocations
|
|
|
|
|
2020-10-01 21:09:13 +00:00
|
|
|
requests:
|
|
|
|
- method: GET
|
|
|
|
path:
|
|
|
|
- "{{BaseURL}}/"
|
|
|
|
headers:
|
|
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
|
2020-10-04 11:23:02 +00:00
|
|
|
matchers-condition: and
|
2020-10-01 21:09:13 +00:00
|
|
|
matchers:
|
|
|
|
- type: word
|
|
|
|
words:
|
|
|
|
- Exporter # Exporters have "Exporter" in the page title (e.g, Node Exporter, Bind Exporter and so on)
|
|
|
|
- /metrics
|
|
|
|
condition: and
|
|
|
|
extractors: # Extract exporter name
|
|
|
|
- type: regex
|
|
|
|
part: body
|
|
|
|
name: exporter_name
|
|
|
|
group: 1
|
|
|
|
regex:
|
2020-10-01 21:18:22 +00:00
|
|
|
- "<title>(.*?)</title>"
|