Merge pull request #9417 from righettod/privatebin_add

Add detection of PrivateBin instances.
patch-1
Dhiyaneshwaran 2024-03-26 13:36:18 +05:30 committed by GitHub
commit 5f44a0d284
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 37 additions and 0 deletions

View File

@ -0,0 +1,37 @@
id: privatebin-detect
info:
name: PrivateBin - Detect
author: righettod
severity: info
description: |
PrivateBin was detected.
reference:
- https://privatebin.info/
metadata:
max-request: 1
verified: true
shodan-query: title:"PrivateBin"
tags: tech,privatebin,detect
http:
- method: GET
path:
- "{{BaseURL}}"
redirects: true
max-redirects: 2
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "privatebin.js", "privatebin</title>", "content=\"privatebin")'
condition: and
extractors:
- type: regex
part: body
group: 1
regex:
- 'privatebin\.[a-z]{2,3}\?([0-9.]+)'