diff --git a/apache-answer-version-detection-regex.yaml b/apache-answer-version-detection-regex.yaml new file mode 100644 index 0000000000..85eceaa7ea --- /dev/null +++ b/apache-answer-version-detection-regex.yaml @@ -0,0 +1,28 @@ +id: apache-answer-version-detection-regex + +info: + name: Apache Answer Version Detection with Regex + author: Mohammad Reza Omrani | @omranisecurity + severity: info + description: Extracts the version of Apache Answer from the API endpoint using regex. + +requests: + - method: GET + path: + - "{{BaseURL}}/answer/api/v1/siteinfo/" + headers: + User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/115.0 + Referer: "{{BaseURL}}/users/login" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + extractors: + - type: regex + part: body + name: version + regex: + - '"version":"([^"]+)"'