added the Remapped headers from api gateway

patch-1
Paul McCarty 2023-10-29 08:06:52 +10:00
parent 854b2251fd
commit 3036c7ae92
No known key found for this signature in database
GPG Key ID: B76CC8584C86D6D6
1 changed files with 55 additions and 0 deletions

View File

@ -0,0 +1,55 @@
id: aws-appsync-detect
info:
name: AWS AppSync Detect
author: 6mile SecureStack
severity: info
metadata:
max-request: 1
verified: true
shodan-query:
- aws_appsync_authenticationType:
- aws_appsync_graphqlEndpoint:
- aws_appsync_apiKey:
- aws_appsync_region:
tags: tech,aws,appsync,amazon,graphql
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: or
matchers:
- type: word
name: AppSync detected in body
part: body
condition: or
case-insensitive: true
words:
- 'aws_appsync_authenticationType:'
- 'aws_appsync_graphqlEndpoint:'
- 'aws_appsync_apiKey:'
- 'aws_appsync_region:'
- type: word
name: AppSync detected via header
words:
- 'aws_appsync_authenticationType:'
- 'aws_appsync_graphqlEndpoint:'
- 'aws_appsync_apiKey:'
- 'aws_appsync_region:'
part: header
case-insensitive: true
- type: word
name: AppSync detected via error
words:
- 'x-amzn-errortype: UnknownOperationException'
- 'x-amzn-errortype: ForbiddenException'
- 'x-amzn-errortype: MalformedHttpRequestException'
part: header
case-insensitive: true