Merge pull request #11126 from righettod/hubble_add

Add detection of HUBBLE instances.
patch-13
Dhiyaneshwaran 2024-11-02 16:32:58 +05:30 committed by GitHub
commit b8336e764c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 29 additions and 0 deletions

View File

@ -0,0 +1,29 @@
id: hubble-detect
info:
name: Hubble - Detect
author: righettod
severity: info
description: |
Hubble products was detected.
reference:
- https://github.com/cilium/hubble
- https://docs.cilium.io/en/stable/observability/hubble/
metadata:
verified: true
max-request: 1
shodan-query: http.title:"Hubble UI"
tags: tech,hubble,detect
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "<title>hubble ui enterprise", "<title>hubble ui")'
condition: and