Update nginx-version.yaml

patch-1
Muhammad Daffa 2022-05-06 17:11:26 +07:00 committed by GitHub
parent 50f3acc6d3
commit 48bdaf98cf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 7 deletions

View File

@ -1,8 +1,8 @@
id: nginx-version
info:
name: nginx version detect
author: philippedelteil
name: Nginx version detect
author: philippedelteil,daffainfo
severity: info
description: Some nginx servers have the version on the response header. Useful when you need to find specific CVEs on your targets.
tags: tech,nginx
@ -11,20 +11,21 @@ requests:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: regex
part: header
regex:
- "nginx+"
- "nginx\\[0-9.]+"
- type: status
status:
- 200
extractors:
- type: kval
- type: regex
part: header
kval:
- Server
group: 1
regex:
- "nginx\\([0-9.]+)"