From 9bc8e4194bdd2d7694842809776e7bb92d172c7a Mon Sep 17 00:00:00 2001 From: Dominique RIGHETTO Date: Sat, 30 Mar 2024 17:01:53 +0100 Subject: [PATCH 1/2] Add files via upload --- http/technologies/simplesamlphp-detect.yaml | 30 +++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 http/technologies/simplesamlphp-detect.yaml diff --git a/http/technologies/simplesamlphp-detect.yaml b/http/technologies/simplesamlphp-detect.yaml new file mode 100644 index 0000000000..890378ebf4 --- /dev/null +++ b/http/technologies/simplesamlphp-detect.yaml @@ -0,0 +1,30 @@ +id: simplesamlphp-detect + +info: + name: SimpleSAMLphp - Detect + author: righettod + severity: info + description: | + SimpleSAMLphp was detected. + reference: + - https://simplesamlphp.org/ + metadata: + max-request: 1 + verified: true + shodan-query: http.title:"SimpleSAMLphp installation page" + tags: tech,simplesaml,detect + +http: + - method: GET + path: + - "{{BaseURL}}/simplesaml/module.php/core/frontpage_welcome.php" + - "{{BaseURL}}/module.php/core/frontpage_welcome.php" + + stop-at-first-match: true + + matchers: + - type: dsl + dsl: + - 'status_code == 200' + - 'contains_any(to_lower(body), "you have successfully installed simplesamlphp", "simplesamlphp installation page", "/module.php/core/login-admin.php")' + condition: and From 0dd2d42f2cfe6470a956bb4e45b07265bacd02f0 Mon Sep 17 00:00:00 2001 From: Dominique RIGHETTO Date: Sat, 30 Mar 2024 17:05:21 +0100 Subject: [PATCH 2/2] Fix error in tags --- http/technologies/simplesamlphp-detect.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/http/technologies/simplesamlphp-detect.yaml b/http/technologies/simplesamlphp-detect.yaml index 890378ebf4..49cd809712 100644 --- a/http/technologies/simplesamlphp-detect.yaml +++ b/http/technologies/simplesamlphp-detect.yaml @@ -12,7 +12,7 @@ info: max-request: 1 verified: true shodan-query: http.title:"SimpleSAMLphp installation page" - tags: tech,simplesaml,detect + tags: tech,simplesamlphp,detect http: - method: GET