From 3dee93d59c567d058c4a734263f8f656778cefd8 Mon Sep 17 00:00:00 2001
From: Ricardo Maia <rsmaia@gmail.com>
Date: Wed, 30 Nov 2022 04:43:00 -0300
Subject: [PATCH] Add vbulletin-detect.yaml

---
 technologies/vbulletin-detect.yaml | 43 ++++++++++++++++++++++++++++++
 1 file changed, 43 insertions(+)
 create mode 100644 technologies/vbulletin-detect.yaml

diff --git a/technologies/vbulletin-detect.yaml b/technologies/vbulletin-detect.yaml
new file mode 100644
index 0000000000..fef9e3dc79
--- /dev/null
+++ b/technologies/vbulletin-detect.yaml
@@ -0,0 +1,43 @@
+id: vbulletin-detect
+
+info:
+  name: vBulletin Detect
+  author: ricardomaia
+  severity: info
+  description: vBulletin is a proprietary forum and community publishing software written in PHP.
+
+  metadata:
+    verified: true
+    build-with-query: https://trends.builtwith.com/websitelist/vBulletin
+    google-query: intext:"Powered By vBulletin"
+
+  reference:
+    - https://www.vbulletin.com/
+  tags: tech,vbulletin
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+    redirects: true
+    max-redirects: 2
+    stop-at-first-match: true
+    matchers-condition: or
+    matchers:
+      - type: regex
+        regex:
+          - "(?i)meta.name=.generator.*content=.vBulletin"
+          - '(?i)\*.vBulletin.([\d.|\d]+).CSS'
+        condition: or
+      - type: word
+        case-insensitive: true
+        words:
+          - "Powered By vBulletin"
+    extractors:
+      - type: regex
+        name: version
+        part: body
+        group: 1
+        regex:
+          - '(?i)meta.name=.generator.*content=.vbulletin.([\d.|\d]+)'
+          - '(?i)\*.vBulletin.([\d.|\d]+).CSS'