From 82265865689dba320bef2b7213602ca0b0a6351b Mon Sep 17 00:00:00 2001 From: Dominique RIGHETTO Date: Fri, 1 Nov 2024 11:31:08 +0100 Subject: [PATCH 1/2] Add files via upload --- http/technologies/hubble-detect.yaml | 29 ++++++++++++++++++++++++++++ 1 file changed, 29 insertions(+) create mode 100644 http/technologies/hubble-detect.yaml diff --git a/http/technologies/hubble-detect.yaml b/http/technologies/hubble-detect.yaml new file mode 100644 index 0000000000..0d913eae57 --- /dev/null +++ b/http/technologies/hubble-detect.yaml @@ -0,0 +1,29 @@ +id: hubble-detect + +info: + name: Hubble - Detect + author: righettod + severity: info + description: | + Hubble products was detected. + reference: + - https://github.com/cilium/hubble + - https://docs.cilium.io/en/stable/observability/hubble/ + metadata: + verified: true + max-request: 1 + shodan-query: http.title:"Hubble UI" + tags: tech,hubble,detect + +http: + - method: GET + path: + - "{{BaseURL}}" + + host-redirects: true + matchers: + - type: dsl + dsl: + - 'status_code == 200' + - 'contains_any(to_lower(body), "hubble ui enterprise", "hubble ui")' + condition: and From 0d1e3464fa68b8f09c645f139a79c538213db93f Mon Sep 17 00:00:00 2001 From: Ritik Chaddha <44563978+ritikchaddha@users.noreply.github.com> Date: Sat, 2 Nov 2024 14:13:11 +0530 Subject: [PATCH 2/2] Update hubble-detect.yaml --- http/technologies/hubble-detect.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/http/technologies/hubble-detect.yaml b/http/technologies/hubble-detect.yaml index 0d913eae57..1ac253e019 100644 --- a/http/technologies/hubble-detect.yaml +++ b/http/technologies/hubble-detect.yaml @@ -25,5 +25,5 @@ http: - type: dsl dsl: - 'status_code == 200' - - 'contains_any(to_lower(body), "hubble ui enterprise", "hubble ui")' + - 'contains_any(to_lower(body), "hubble ui enterprise", "<title>hubble ui")' condition: and