Merge pull request #9567 from righettod/redfish_add

Add detection of Redfish API.
patch-1
Dhiyaneshwaran 2024-04-16 11:41:29 +05:30 committed by GitHub
commit 4f8d6b273b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 36 additions and 0 deletions

View File

@ -0,0 +1,36 @@
id: redfish-api
info:
name: Redfish API - Detect
author: righettod
severity: info
description: |
Redfish API was detected.
reference:
- https://en.wikipedia.org/wiki/Redfish_(specification)
- https://www.dmtf.org/standards/redfish
metadata:
verified: true
max-request: 1
shodan-query: http.html:"/redfish/v1"
tags: config,exposure,redfish,api
http:
- method: GET
path:
- "{{BaseURL}}/redfish/v1/"
matchers:
- type: dsl
dsl:
- 'contains_any(body, "\"@odata.type\":", "/redfish/v1/$metadata#Message")'
- 'contains(header, "application/json")'
- 'status_code == 200 || status_code == 502'
condition: and
extractors:
- type: regex
part: body
group: 1
regex:
- '[a-z]+\.v?([0-9_\.]+)\.'