Update and rename apache-answer-version-detection-regex.yaml to http/technologies/apache/apache-answer-detect.yaml

apache-answer-version-detection-regex.yaml

@@ -1,28 +0,0 @@
-id: apache-answer-version-detection-regex
-
-info:
-  name: Apache Answer Version Detection with Regex
-  author: Mohammad Reza Omrani | @omranisecurity
-  severity: info
-  description: Extracts the version of Apache Answer from the API endpoint using regex.
-
-requests:
-  - method: GET
-    path:
-      - "{{BaseURL}}/answer/api/v1/siteinfo/"
-    headers:
-      User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0
-      Referer: "{{BaseURL}}/users/login"
-
-    matchers-condition: and
-    matchers:
-      - type: status
-        status:
-          - 200
-
-    extractors:
-      - type: regex
-        part: body
-        name: version
-        regex:
-          - '"version":"([^"]+)"'

http/technologies/apache/apache-answer-detect.yaml

@@ -0,0 +1,44 @@
+id: apache-answer-detect
+
+info:
+  name: Apache Answer - Detection
+  author: omranisecurity
+  severity: info
+  description: |
+    Detects Apache Answer version through API endpoit
+  reference:
+    - https://answer.apache.org/
+  metadata:
+    shodan-query: html:"Apache Answer"
+    fofa-query: body="Apache Answer"
+    verified: true
+    max-request: 1
+  tags: detect,tech,apache
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/answer/api/v1/siteinfo"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - '"code":'
+
+      - type: word
+        part: header
+        words:
+          - application/json
+
+      - type: status
+        status:
+          - 200
+
+    extractors:
+      - type: regex
+        part: body
+        name: version
+        regex:
+          - '"version":"([^"]+)"'