From 0f0e58c8c3735cb043e52d3f833b4ef19b9beeb4 Mon Sep 17 00:00:00 2001
From: pussycat0x <65701233+pussycat0x@users.noreply.github.com>
Date: Wed, 29 Mar 2023 16:58:16 +0530
Subject: [PATCH] Sitecore CMS - Detect

---
 technologies/sitecore-cms.yaml | 30 ++++++++++++++++++++++++++++++
 1 file changed, 30 insertions(+)
 create mode 100644 technologies/sitecore-cms.yaml

diff --git a/technologies/sitecore-cms.yaml b/technologies/sitecore-cms.yaml
new file mode 100644
index 0000000000..813b8a8d52
--- /dev/null
+++ b/technologies/sitecore-cms.yaml
@@ -0,0 +1,30 @@
+id: sitecore-cms
+
+info:
+  name: Sitecore CMS - Detect
+  author: RandomDhiraj
+  severity: info
+  description: |
+    Detect Sitecore Content Management System (CMS) websites based on a redirect from the sitecore media handler URL pattern to the notfound.aspx page.
+  reference: |
+    https://www.sitecore.com
+  metadata:
+    verified: "true"
+    shodan-query: title:"sitecore"
+  tags: cms,sitecore
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/-/media/doo-doo.ashx"
+
+    host-redirects: true
+    matchers:
+      - type: regex
+        part: header
+        regex:
+          - "Location: /sitecore/service/notfound.aspx"
+
+      - type: status
+        status:
+          - 302
\ No newline at end of file