Create adobe-coldfusion-detector.yaml

examples

nuclei -t  adobe-coldfusion-detector.yaml -u http://www.studiobci.com/
nuclei -t  adobe-coldfusion-detector.yaml -u http://app1.ancine.gov.br
nuclei -t  adobe-coldfusion-detector.yaml -u  http://www.sem.dol.gov
patch-1
Philippe Delteil 2021-09-02 00:19:36 -04:00 committed by GitHub
parent 71531d8467
commit 69cafb90b1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 54 additions and 0 deletions

View File

@ -0,0 +1,54 @@
id: adobe-coldfusion-detector
info:
name: Adobe ColdFusion Detector
author: philippedelteil
severity: info
description: With this template we can detect the version number of Coldfusion instances based on their logos.
tags: adobe,coldfusion
requests:
- method: GET
path:
- "{{BaseURL}}/CFIDE/administrator/images/mx_login.gif"
- "{{BaseURL}}/cfide/administrator/images/mx_login.gif"
- "{{BaseURL}}/CFIDE/administrator/images/background.jpg"
- "{{BaseURL}}/cfide/administrator/images/background.jpg"
- "{{BaseURL}}/CFIDE/administrator/images/componentutilslogin.jpg"
- "{{BaseURL}}/cfide/administrator/images/componentutilslogin.jpg"
redirects: true
stop-at-first-match: true
max-redirects: 2
matchers:
- type: dsl
name: "ColdFusion 8"
dsl:
- "status_code==200 && (\"da07693b70ddbac5bc0d8bf98d4a3539\" == md5(body))"
- type: dsl
name: "ColdFusion 9"
dsl:
- "status_code==200 && (\"c0757351b00f7ecf35a035c976068d12\" == md5(body))"
- type: dsl
name: "ColdFusion 10"
dsl:
- "status_code==200 && (\"a4c81b7a6289b2fc9b36848fa0cae83c\" == md5(body))"
- type: dsl
name: "ColdFusion 11"
dsl:
- "status_code==200 && (\"7f024de9f480481ca03049e0d66679d6\" == md5(body))"
- type: dsl
name: "ColdFusion 2016"
dsl:
- "status_code==200 && (\"f1281b6866aef66e35dc36fe4f0bf990\" == md5(body))"
- type: dsl
name: "ColdFusion 2021"
dsl:
- "status_code==200 && (\"a88530d7f1980412dac076de732a4e86\" == md5(body))"
- type: dsl
name: "ColdFusion 2018"
dsl:
- "status_code==200 && (\"92ef6ee3c4d1700e3cca797b19d3e7ba\" == md5(body))"
- type: dsl
name: "ColdFusion MX 7"
dsl:
- "status_code==200 && (\"cb594e69af5ba15bca453f76aca53615\" == md5(body))"