Create apache-ozone-conf.yaml

Detects if path /conf of Apache Ozone web application is exposed.

http/exposures/configs/apache-ozone-conf.yaml

@@ -0,0 +1,32 @@
+id: apache-ozone-conf
+
+info:
+  name: Apache Ozone - Exposure
+  author: icarot
+  severity: info
+  description: |
+    Detects if path /conf of Apache Ozone web application is exposed.
+  classification:
+    cpe: cpe:2.3:a:apache:ozone:-:*:*:*:*:*:*:*
+  metadata:
+    max-request: 1
+    vendor: apache
+    product: ozone
+    shodan-query: title:"Apache Ozone"
+  tags: tech,ozone,apache,detect
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/conf"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - '<source>ozone-default.xml</source>'
+          - 'ozone'
+
+      - type: status
+        status:
+          - 200