Merge pull request #105 from fabaff/web-server

Add support for detecting web server daemons
patch-1
bauthard 2020-05-25 10:41:51 +05:30 committed by GitHub
commit bf645f6c1f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 43 additions and 0 deletions

View File

@ -0,0 +1,43 @@
id: web-server
info:
name: Detect web server daemon
author: fabaff
severity: low
requests:
- method: GET
path:
- "{{BaseURL}}/"
matchers-condition: or
matchers:
- type: word
name: apache
words:
- "Apache"
part: header
- type: word
name: lighttpd
words:
- "lighttpd"
part: header
- type: word
name: lighttpd
words:
- "lighttpd"
part: header
- type: word
name: wsgiserver
words:
- "WSGIServer"
part: header
- type: word
name: simplehttp
words:
- "SimpleHTTP"
part: header
- type: word
name: twistedweb
words:
- "TwistedWeb"
part: header