Add zap-api-detect (#5255)

* Add zap-api-detect

Signed-off-by: hahwul <hahwul@gmail.com>

* matchers simplified

Signed-off-by: hahwul <hahwul@gmail.com>
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
patch-1
HAHWUL 2022-08-31 21:21:02 +09:00 committed by GitHub
parent cce6abaebf
commit 51d185dd73
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 23 additions and 0 deletions

View File

@ -0,0 +1,23 @@
id: zap-rest-api-detect
info:
name: ZAP Rest API Server Running
author: hahwul
severity: info
reference:
- https://www.zaproxy.org/docs/api/
tags: zap,tech
requests:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: word
part: response
words:
- '<title>ZAP API UI</title>'
- 'Welcome to the OWASP Zed Attack Proxy (ZAP)'
- 'Access-Control-Allow-Headers: ZAP-Header'
condition: or