moving files around

misconfiguration/kubernetes/kubernetes-pods.yaml

@@ -13,16 +13,18 @@ requests:
     path:
       - '{{BaseURL}}/pods'
       - '{{BaseURL}}/api/v1/pods'
+
     matchers-condition: and
     matchers:
       - type: word
         words:
           - "apiVersion"
-        part: body
+
       - type: word
         words:
           - "application/json"
         part: header
+
       - type: status
         status:
           - 200

misconfiguration/kubernetes/kubernetes-resource-report.yaml

@@ -1,24 +1,24 @@
-id: overview-kubernetes-resource-report
+id: kubernetes-resource-report
+
 info:
   name: Detect Overview Kubernetes Resource Report
   author: pussycat0x
   severity: medium
   description: Information Disclosure of Kubernetes Resource Report
-  tags: Kubernetes,exposure
+  tags: kubernetes,exposure
+
 requests:
   - method: GET
     path:
       - "{{BaseURL}}"
+
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
-          - "<title>Overview - Kubernetes Resource Report</title>"
-          - "Pods"
-          - "Worker Nodes"
-          - "Applications"
-        condition: and
+          - "Overview - Kubernetes Resource Report"
+
       - type: status
         status:
           - 200

technologies/abyss-web-server.yaml

@@ -1,21 +1,25 @@
-id: abyss-web-server-detect
+id: abyss-web-server
+
 info:
   name: Detect Abyss Web Server
   author: pussycat0x
   severity: info
   tags: tech
-  reference: app="Abyss-Web-Server" -fofa query
+  additional-fields:
+    fofa-dork: 'app="Abyss-Web-Server"'
+
 requests:
   - method: GET
     path:
       - "{{BaseURL}}"
+
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
-          - "<TITLE>Welcome to Abyss Web Server</TITLE>"
-        condition: and
+          - "Welcome to Abyss Web Server"
+
       - type: status
         status:
           - 200

technologies/kubernetes-enterprise-manager.yaml

@@ -1,21 +1,25 @@
 id: kubernetes-enterprise-manager
+
 info:
   name: Detect Kubernetes Enterprise Manager
   author: pussycat0x
   severity: info
-  tags: tech
-  reference: app="Kubernetes-Enterprise-Manager" -fofa query
+  tags: tech,kubernetes
+  additional-fields:
+    fofa-dork: 'app="Kubernetes-Enterprise-Manager"'
+
 requests:
   - method: GET
     path:
       - "{{BaseURL}}"
+
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
-          - "<title>Kubernetes Enterprise Manager</title>"
-        condition: and
+          - "Kubernetes Enterprise Manager"
+
       - type: status
         status:
           - 200

technologies/kubernetes-mirantis.yaml

@@ -1,21 +1,25 @@
-id: mirantis-kubernetes-engine
+id: kubernetes-mirantis
+
 info:
   name: Detect Mirantis Kubernetes Engine
   author: pussycat0x
   severity: info
-  tags: tech
-  reference: app="Mirantis-Kubernetes-Engine" -fofa query
+  tags: tech,kubernetes
+  additional-fields:
+    fofa-dork: 'app="Mirantis-Kubernetes-Engine"'
+
 requests:
   - method: GET
     path:
       - "{{BaseURL}}"
+
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
-          - "<title>Mirantis Kubernetes Engine</title>"
-        condition: and
+          - "Mirantis Kubernetes Engine"
+
       - type: status
         status:
           - 200

technologies/oracle-iplanet-web-server.yaml

@@ -1,22 +1,25 @@
-id: oracle-iplanet-web-server-detect
+id: oracle-iplanet-web-server
+
 info:
   name: Detect Oracle-iPlanet-Web-Server
   author: pussycat0x
   severity: info
-  tags: tech
-  reference: app="Oracle-iPlanet-Web-Server -fofa query
+  tags: tech,oracle
+  additional-fields:
+    fofa-dork: 'app="Oracle-iPlanet-Web-Server'
+
 requests:
   - method: GET
     path:
       - "{{BaseURL}}"
+
     matchers-condition: and
     matchers:
       - type: word
         part: body
         words:
-          - "<title>Oracle iPlanet Web Server 7.0</title>"
-          - "<title>Oracle iPlanet Web Server</title>"
-        condition: and
+          - "Oracle iPlanet Web Server"
+
       - type: status
         status:
           - 200