Merge pull request #9459 from righettod/simplesamlphp_add

Add detection of simpleSAMLphp instances.
patch-1
pussycat0x 2024-04-04 13:44:25 +05:30 committed by GitHub
commit 8e291eb280
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 30 additions and 0 deletions

View File

@ -0,0 +1,30 @@
id: simplesamlphp-detect
info:
name: SimpleSAMLphp - Detect
author: righettod
severity: info
description: |
SimpleSAMLphp was detected.
reference:
- https://simplesamlphp.org/
metadata:
max-request: 1
verified: true
shodan-query: http.title:"SimpleSAMLphp installation page"
tags: tech,simplesamlphp,detect
http:
- method: GET
path:
- "{{BaseURL}}/simplesaml/module.php/core/frontpage_welcome.php"
- "{{BaseURL}}/module.php/core/frontpage_welcome.php"
stop-at-first-match: true
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "you have successfully installed simplesamlphp", "simplesamlphp installation page", "/module.php/core/login-admin.php")'
condition: and