From 48bdaf98cf3ba757f23a253299b6a05b49261510 Mon Sep 17 00:00:00 2001 From: Muhammad Daffa <36522826+daffainfo@users.noreply.github.com> Date: Fri, 6 May 2022 17:11:26 +0700 Subject: [PATCH] Update nginx-version.yaml --- technologies/nginx/nginx-version.yaml | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/technologies/nginx/nginx-version.yaml b/technologies/nginx/nginx-version.yaml index 4d133e1d80..622d6c6aca 100644 --- a/technologies/nginx/nginx-version.yaml +++ b/technologies/nginx/nginx-version.yaml @@ -1,8 +1,8 @@ id: nginx-version info: - name: nginx version detect - author: philippedelteil + name: Nginx version detect + author: philippedelteil,daffainfo severity: info description: Some nginx servers have the version on the response header. Useful when you need to find specific CVEs on your targets. tags: tech,nginx @@ -11,20 +11,21 @@ requests: - method: GET path: - "{{BaseURL}}" + matchers-condition: and matchers: - - type: regex part: header regex: - - "nginx+" + - "nginx\\[0-9.]+" - type: status status: - 200 extractors: - - type: kval + - type: regex part: header - kval: - - Server + group: 1 + regex: + - "nginx\\([0-9.]+)"