Merge pull request #9313 from righettod/bamboo_add

Add detection of Atlassian Bamboo login panel instances.
patch-1
Ritik Chaddha 2024-03-11 12:24:34 +05:30 committed by GitHub
commit 47f54158ad
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 43 additions and 0 deletions

View File

@ -0,0 +1,43 @@
id: atlassian-bamboo-panel
info:
name: Atlassian Bamboo Login Panel - Detect
author: righettod
severity: info
description: |
Atlassian Bamboo login panel was detected.
reference:
- https://www.atlassian.com/software/bamboo
metadata:
max-request: 1
verified: true
shodan-query: http.title:"Bamboo"
tags: panel,bamboo,login,detect
http:
- method: GET
path:
- "{{BaseURL}}/userlogin!doDefault.action?os_destination=%2Fstart.action"
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<title>Log in as a Bamboo user'
- 'content="Bamboo'
- 'atlassian.bamboo.plugins'
- 'Atlassian Bamboo</a>'
condition: or
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- 'version\s+([0-9A-Za-z\s\.]+)\s+-'
- 'pvpVersion = "([a-z0-9.]+)";'