From 2292a7a0384496bfb77bf453b48c79ac36079e20 Mon Sep 17 00:00:00 2001 From: sandeep <8293321+ehsandeep@users.noreply.github.com> Date: Wed, 7 Apr 2021 15:08:47 +0530 Subject: [PATCH] Adding aws-bucket-service detection --- technologies/aws-bucket-service.yaml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 technologies/aws-bucket-service.yaml diff --git a/technologies/aws-bucket-service.yaml b/technologies/aws-bucket-service.yaml new file mode 100644 index 0000000000..6112a1c409 --- /dev/null +++ b/technologies/aws-bucket-service.yaml @@ -0,0 +1,21 @@ +id: aws-bucket-service + +info: + name: Detect websites using AWS Bucket storage + author: pdteam + severity: info + +requests: + - method: GET + path: + - "{{BaseURL}}" + + matchers: + - type: dsl + dsl: + - contains(tolower(all_headers), 'x-amz-bucket') + - contains(tolower(all_headers), 'x-amz-request') + - contains(tolower(all_headers), 'x-amz-id') + - contains(tolower(all_headers), 'AmazonS3') + part: header + condition: or \ No newline at end of file