From e1bfd7bd3e39f6557f189b484a60a06a241c9076 Mon Sep 17 00:00:00 2001 From: Ach Date: Thu, 1 Jan 1970 00:00:00 +0000 Subject: [PATCH 1/2] Added template for azure-blob-core-detection --- azure-blob-core-detection.yaml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 azure-blob-core-detection.yaml diff --git a/azure-blob-core-detection.yaml b/azure-blob-core-detection.yaml new file mode 100644 index 0000000000..8065a7d1f8 --- /dev/null +++ b/azure-blob-core-detection.yaml @@ -0,0 +1,20 @@ +id: azure-blob-core-detection + +info: + name: Azure Blob Core Service Detection + author: ProjectDiscoveryAI + severity: info + description: | + This template detects the presence of 'blob.core.windows.net' in the response body, indicating potential references to Azure Blob Storage. + +http: + - method: GET + path: + - "{{BaseURL}}" + + matchers-condition: and + matchers: + - type: word + words: + - "blob.core.windows.net" + part: body \ No newline at end of file From a006d79e2434c66d4f6fba1698452e426abd40f1 Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Tue, 29 Oct 2024 22:45:14 +0530 Subject: [PATCH 2/2] Update and rename azure-blob-core-detection.yaml to http/miscellaneous/azure-blob-core-detect.yaml --- .../miscellaneous/azure-blob-core-detect.yaml | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) rename azure-blob-core-detection.yaml => http/miscellaneous/azure-blob-core-detect.yaml (62%) diff --git a/azure-blob-core-detection.yaml b/http/miscellaneous/azure-blob-core-detect.yaml similarity index 62% rename from azure-blob-core-detection.yaml rename to http/miscellaneous/azure-blob-core-detect.yaml index 8065a7d1f8..f19e4973fa 100644 --- a/azure-blob-core-detection.yaml +++ b/http/miscellaneous/azure-blob-core-detect.yaml @@ -1,20 +1,24 @@ -id: azure-blob-core-detection +id: azure-blob-core-detect info: - name: Azure Blob Core Service Detection + name: Azure Blob Core Service - Detect author: ProjectDiscoveryAI severity: info description: | This template detects the presence of 'blob.core.windows.net' in the response body, indicating potential references to Azure Blob Storage. + metadata: + max-request: 1 + verified: true + shodan-query: html:"blob.core.windows.net" + tags: azur,blob,detect http: - method: GET path: - "{{BaseURL}}" - matchers-condition: and matchers: - type: word + part: response words: - "blob.core.windows.net" - part: body \ No newline at end of file