From 0e55fef16727c0e60e604de6e9f4b0dfa9370c77 Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Sun, 24 May 2020 22:16:42 +0200 Subject: [PATCH] Add support for detecting web server daemons --- technologies/web-server.yaml | 43 ++++++++++++++++++++++++++++++++++++ 1 file changed, 43 insertions(+) create mode 100644 technologies/web-server.yaml diff --git a/technologies/web-server.yaml b/technologies/web-server.yaml new file mode 100644 index 0000000000..bb98877e4c --- /dev/null +++ b/technologies/web-server.yaml @@ -0,0 +1,43 @@ +id: web-server + +info: + name: Detect web server daemon + author: fabaff + severity: low + +requests: + - method: GET + path: + - "{{BaseURL}}/" + matchers-condition: or + matchers: + - type: word + name: apache + words: + - "Apache" + part: header + - type: word + name: lighttpd + words: + - "lighttpd" + part: header + - type: word + name: lighttpd + words: + - "lighttpd" + part: header + - type: word + name: wsgiserver + words: + - "WSGIServer" + part: header + - type: word + name: simplehttp + words: + - "SimpleHTTP" + part: header + - type: word + name: twistedweb + words: + - "TwistedWeb" + part: header