nuclei-templates/http/technologies/microstrategy-detect.yaml

58 lines
1.4 KiB
YAML
Raw Normal View History

2021-10-21 15:10:37 +00:00
id: microstrategy-detect
info:
name: MicroStrategy Instances Detection Template
author: philippedelteil,Retr02332
severity: info
description: Detect if MicroStrategy instances exist in your URLS
2022-11-14 19:45:12 +00:00
tags: microstrategy,panel,tech
metadata:
max-request: 16
2021-10-21 15:10:37 +00:00
http:
2021-10-21 15:10:37 +00:00
- method: GET
2021-10-22 10:36:36 +00:00
2021-10-21 15:10:37 +00:00
path:
- "{{BaseURL}}/{{path}}"
payloads:
path:
- MicroStrategy/servlet/mstrWebAdmin/
- MicroStrategy/servlet/mstrWebAdmin
- MicroStrategy/servlet/taskProc/
- MicroStrategy/servlet/taskProc
- MicroStrategy/servlet/mstrWeb/
- MicroStrategy/servlet/mstrWeb
- MicroStrategy/
- MicroStrategy
- servlet/mstrWebAdmin/
- servlet/mstrWebAdmin
- servlet/taskProc/
- servlet/taskProc
- servlet/mstrWeb/
- servlet/mstrWeb
- asp/Main.aspx
- MicroStrategy/asp
2021-10-22 10:36:36 +00:00
2021-10-22 17:15:06 +00:00
stop-at-first-match: true
2021-10-22 10:36:36 +00:00
matchers:
- type: dsl
2021-10-22 17:15:06 +00:00
condition: or
2021-10-22 10:36:36 +00:00
dsl:
- 'contains(body, "MicroStrategy, Incorporated.")'
- 'contains(body, "microstrategy.servletName")'
- 'contains(body, "mstrHiddenInput")'
extractors:
- type: regex
part: body
group: 1
regex:
- 'ProductHelp/([0-9.A-Z]+)'
- type: regex
part: body
group: 1
regex:
- 'WELCOME. MicroStrategy ([0-9]+)'