From 321d816b15aebcae08f8445d60f2ec82dc6b557c Mon Sep 17 00:00:00 2001 From: sandeep Date: Tue, 21 Sep 2021 14:18:34 +0530 Subject: [PATCH] Added sitecore-version detection --- technologies/sitecore-version.yaml | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 technologies/sitecore-version.yaml diff --git a/technologies/sitecore-version.yaml b/technologies/sitecore-version.yaml new file mode 100644 index 0000000000..9371cfc349 --- /dev/null +++ b/technologies/sitecore-version.yaml @@ -0,0 +1,30 @@ +id: sitecore-version + +info: + name: Sitecore version detection + author: bernardofsr + severity: info + tags: sitecore,tech + reference: https://www.cvedetails.com/vulnerability-list/vendor_id-9609/Sitecore.html + +requests: + - method: GET + path: + - "{{BaseURL}}/sitecore/shell/sitecore.version.xml" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: word + words: + - "Sitecore Corporation" + part: body + + extractors: + - type: regex + group: 1 + regex: + - "([0-9]+)"