Merge pull request #8680 from projectdiscovery/argocd-login-fix

Fixed argocd detection template
patch-1
Dhiyaneshwaran 2023-11-23 20:37:02 +05:30 committed by GitHub
commit 1a4a591961
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 19 additions and 11 deletions

View File

@ -2,7 +2,7 @@ id: argocd-detect
info:
name: Argo CD Login Panel
author: Adam Crosser,daffainfo
author: Adam Crosser,daffainfo,aringo
severity: info
description: An Argo CD login panel was discovered.
reference:
@ -17,17 +17,25 @@ info:
http:
- method: GET
path:
- "{{BaseURL}}/login"
- "{{BaseURL}}/api/version"
- "{{BaseURL}}/api/v1/settings"
matchers-condition: and
stop-at-first-match: true
matchers-condition: or
matchers:
- type: word
part: body
words:
- '<title>Argo CD</title>'
- type: dsl
dsl:
- contains(to_lower(header_1), 'grpc-metadata-content-type')
- status_code_1 == 200
condition: and
- type: status
status:
- 200
- type: dsl
dsl:
- contains(body_2, 'appLabelKey')
- contains(body_2, 'resourceOverrides')
condition: and
# digest: 4a0a00473045022025f2ab21b49fc17ae34bd50a0f30ed72e31716e58078dc235b23768dc6d432340221009523088dadc3d7fa9ae5505145ec7af57fda9a31b89849b0cdb295a13802b849:922c64590222798bb761d5b6d8e72950
extractors:
- type: json
json:
- .Version