2023-10-07 19:46:02 +00:00
|
|
|
id: devexpress-detect
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: DevExpress Detect
|
|
|
|
|
author: CravateRouge
|
|
|
|
|
severity: info
|
|
|
|
|
metadata:
|
2023-10-07 19:48:19 +00:00
|
|
|
max-request: 1
|
2023-10-07 19:46:02 +00:00
|
|
|
shodan-query: html:"DXR.axd"
|
2024-05-22 09:10:28 +00:00
|
|
|
description: "Detect DevExpress based on existence of its HTTP handler for serving images, scripts and other resources to the client side"
|
|
|
|
|
reference:
|
|
|
|
|
- https://github.com/DevExpress/aspnet-security-bestpractices/blob/master/SecurityBestPractices.WebForms/README.md#53-information-exposure-through-source-code
|
|
|
|
|
- https://supportcenter.devexpress.com/ticket/details/q311748/dxr-axd-what-is-it-and-how-to-disable-it
|
2023-10-07 19:46:02 +00:00
|
|
|
tags: devexpress,iis,microsoft,asp,tech
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}"
|
|
|
|
|
|
|
|
|
|
redirects: true
|
|
|
|
|
max-redirects: 2
|
|
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
part: body
|
|
|
|
|
words:
|
2023-10-14 11:27:55 +00:00
|
|
|
- "DXR.axd"
|
2023-10-20 11:41:13 +00:00
|
|
|
|
|
|
|
|
# digest: 490a0046304402207d0d186d436006888ed2ac008bf749f0e9ceea5ca1a9c1e06785922736698b7e0220627318c732b562d97957499a31a8288e274a59b561aab29325baa0df2917dc39:922c64590222798bb761d5b6d8e72950
|
