Merge pull request #2488 from dogasantos/master

Apache Axis detection and exposure
patch-1
Sandeep Singh 2021-08-26 15:07:10 +05:30 committed by GitHub
commit 3529aa15a2
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 61 additions and 0 deletions

View File

@ -0,0 +1,30 @@
id: axis-happyaxis
info:
name: Axis Happyaxis Exposure
author: dogasantos
severity: info
tags: axis,axis2,middleware,exposure,apache
requests:
- method: GET
path:
- "{{BaseURL}}/axis2/axis2-web/HappyAxis.jsp"
- "{{BaseURL}}/axis/happyaxis.jsp"
- "{{BaseURL}}/axis2-web/HappyAxis.jsp"
- "{{BaseURL}}/happyaxis.jsp"
matchers-condition: and
matchers:
- type: word
words:
- "Axis Happiness Page"
- "Axis2 Happiness Page"
- "Examining Application Server"
- "Examining Version Service"
- "Examining System Properties"
condition: or
- type: status
status:
- 200

View File

@ -0,0 +1,31 @@
id: apache-axis-detect
info:
name: apache-axis-detect
author: dogasantos
severity: info
description: Axis and Axis2 detection
tags: tech,axis2,middleware,apache
requests:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/axis2/"
- "{{BaseURL}}/axis/"
matchers-condition: and
matchers:
- type: word
words:
- "Validate"
- "Welcome"
- "Axis"
- "deployed"
- "installation"
- "Admin"
condition: and
- type: status
status:
- 200