nuclei-templates/technologies/kong-detect.yaml

id: kong-detect

info:
  name: Detect Kong
  author: geeknik,joshlarsen
  severity: info
  description: The Cloud-Native API Gateway
  reference:
    - https://github.com/Kong/kong
  tags: tech,kong

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        part: header
        words:
          - "server: kong"
          - "x-kong-response-latency"
          - "x-kong-upstream_latency"
          - "x-kong-proxy-latency"
        condition: or
        case-insensitive: true

    extractors:
      - type: kval
        kval:
          - server
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`id: kong-detect`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`info:`
			`name: Detect Kong`
Detect more Kong headers (#4406) * Detect more Kong headers * simplified template with case-insensitive word matchers Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-05-16 16:06:55 +00:00			`author: geeknik,joshlarsen`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`severity: info`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`description: The Cloud-Native API Gateway`
			`reference:`
			`- https://github.com/Kong/kong`
Coverage for all templates using tags 2021-09-09 13:38:13 +00:00			`tags: tech,kong`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00
			`requests:`
			`- method: GET`
			`path:`
Preparing for request clustering 2021-01-13 07:31:46 +00:00			`- "{{BaseURL}}"`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00
			`matchers:`
Detect more Kong headers (#4406) * Detect more Kong headers * simplified template with case-insensitive word matchers Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-05-16 16:06:55 +00:00			`- type: word`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00			`part: header`
Detect more Kong headers (#4406) * Detect more Kong headers * simplified template with case-insensitive word matchers Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-05-16 16:06:55 +00:00			`words:`
			`- "server: kong"`
			`- "x-kong-response-latency"`
			`- "x-kong-upstream_latency"`
			`- "x-kong-proxy-latency"`
			`condition: or`
			`case-insensitive: true`
Create kong-detect.yaml 34,747 results for `Kong` on Shodan. Good luck! 2020-10-12 14:13:21 +00:00
			`extractors:`
Update kong-detect.yaml False Positive Before: `[2021-05-04 18:16:57] [kong-detect] [http] [info] https://hongkong.reddit.com:443 [Location: https://www.reddit.com/r/hongkong/]` After: `[INF] No results found. Better luck next time!` Actual Kong server: `[2021-05-04 18:22:52] [kong-detect] [http] [info] https://xxx.xxx.xxx.xxx/ [kong/2.0.5]` 2021-05-04 23:23:33 +00:00			`- type: kval`
			`kval:`
Detect more Kong headers (#4406) * Detect more Kong headers * simplified template with case-insensitive word matchers Co-authored-by: sandeep <sandeep@projectdiscovery.io> 2022-05-16 16:06:55 +00:00			`- server`