Merge pull request #45 from NkxxkN/NkxxkN/multiple-fingerprints

Add ReverseProxy/Language/CMS/Web-Framework&Tools detect

technologies/cms-detect.yaml

@@ -0,0 +1,28 @@
+id: cms-detect
+
+info:
+  name: CMS Detect
+  author: NkxxkN https://twitter.com/NkkxN
+  severity: medium
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/"
+    matchers:
+      - type: word
+        name: drupal
+        words:
+          - "X-Drupal"
+          - "x-drupal"
+          - "X-Generator: Drupal"
+        conditition: or
+        part: header
+      - type: word
+        name: wordpress
+        words:
+          - "/wp-content/"
+          - "/wp-includes/"
+        condition: or
+        part: body
+        

technologies/programming-language-detect.yaml

@@ -0,0 +1,32 @@
+id: programming-language-detect
+
+info:
+  name: Programming Language Detect
+  author: NkxxkN https://twitter.com/NkkxN
+  severity: medium
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/"
+    matchers:
+      - type: word
+        name: php
+        words:
+          - "X-Powered-By: PHP"
+          - "PHPSESSID"
+        part: header
+      - type: word
+        name: node
+        words:
+          - "Server: NodeJS"
+          - "X-Powered-By: nodejs"
+        condition: or
+        part: header
+      - type: word
+        name: python
+        words:
+          - "Python/2."
+          - "Python/3."
+        condition: or
+        part: header

technologies/reverse-proxy-detect.yaml

@@ -0,0 +1,22 @@
+id: reverse-proxy-detect
+
+info:
+  name: Reverse Proxy Detect
+  author: NkxxkN https://twitter.com/NkkxN
+  severity: low
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/"
+    matchers:
+      - type: word
+        name: nginx
+        words:
+          - "Server: nginx"
+        part: header
+      - type: word
+        name: apache
+        words:
+          - "Server: Apache"
+        part: header

technologies/tool-detect.yaml

@@ -0,0 +1,17 @@
+id: tool-detect
+
+info:
+  name: Tool Detect
+  author: NkxxkN https://twitter.com/NkkxN
+  severity: medium
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/"
+    matchers:
+      - type: word
+        name: clockwork
+        words:
+          - "X-Clockwork-Id"
+        part: header

technologies/web-framework-detect.yaml

@@ -0,0 +1,41 @@
+id: web-framework-detect
+
+info:
+  name: Web Framework Detect
+  author: NkxxkN https://twitter.com/NkkxN
+  severity: low
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/"
+    matchers:
+      - type: word
+        name: symfony
+        words:
+          - "Set-Cookie: symfony="
+        part: header
+      - type: word
+        name: laravel
+        words:
+          - "Set-Cookie: laravel_session="
+        part: header
+      - type: word
+        name: express
+        words:
+          - "X-Powered-By: Express"
+        part: header
+      - type: word
+        name: rails
+        words:
+          - "meta content=\"authenticity_token\" name=\"csrf-param"
+        part: body
+      - type: word
+        name: angular
+        words:
+          - "ng-app=\""
+          - "<ng-app"
+          - "*ngIf="
+          - "ng-controller="
+        condition: or
+        part: body