Merge pull request #9473 from lstatro/yourls-server-detect

YOURLS Detection Template
patch-1
Ritik Chaddha 2024-04-03 10:23:48 +05:30 committed by GitHub
commit 70bb9e7272
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 47 additions and 0 deletions

View File

@ -0,0 +1,47 @@
id: yourls-detect
info:
name: YOURLS - Detection
author: lstatro
severity: info
description: |
Detects if the target is running a YOURLS (Your Own URL Shortener) server
reference:
- https://github.com/YOURLS/YOURLS
metadata:
max-request: 1
verified: true
shodan-query: title:"Your Own URL Shortener"
fofa-query: title="Your Own URL Shortener"
tags: tech,yourls
http:
- method: GET
path:
- "{{BaseURL}}"
redirects: true
max-redirects: 3
matchers-condition: and
matchers:
- type: word
part: body
words:
- '<title>YOURLS'
- 'content="YOURLS'
- 'alt="YOURLS'
- '/yourls-logo'
condition: or
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- 'YOURLS<\/a>([ a-z0-9.-]+)'
- 'content="YOURLS([ 0-9.]+)"'