Update and rename x-aspnetmvc-version-disclosure.yaml to aspnetmvc-version-disclosure.yaml

patch-1
Ritik Chaddha 2024-03-15 19:13:34 +05:30 committed by GitHub
parent 927494ab8b
commit 549ce430a5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 12 additions and 12 deletions

View File

@ -1,33 +1,33 @@
id: AspNetMvc-Version-disclosure
id: aspnetmvc-version-disclosure
info:
name: AspNetMvc-Version-disclosure
name: AspNetMvc Version - Detect
author: lucky0x0d,PulseSecurity.co.nz
severity: info
description: |
Detects version disclosed via X-AspNetMvc-Version: header
tags: technology, detection, tech-detect
metadata:
max-request: 1
Detects version disclosed via 'X-AspNetMvc-Version' header.
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0.0
cwe-id: CWE-200
metadata:
max-request: 1
verified: true
shodan-query: "X-AspNetMvc-Version"
tags: aspnetmvc,tech,detect
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 3
redirects: true
max-redirects: 4
matchers-condition: or
matchers:
- type: dsl
dsl:
- "regex('(?i)X-AspNetMvc-Version', header)"
- "status_code != 301 && status_code != 302"
condition: and
- 'contains(tolower(header), "x-aspnetmvc-version")'
extractors:
- type: kval