Merge pull request #9316 from Lucky-Pulse/X-AspNet_and_Mvc-Version-disclosure

Added 2 templates to detect X-AspNetMvc-Version and X-AspNet-Version …

http/technologies/microsoft/aspnet-version-detect.yaml

@@ -0,0 +1,35 @@
+id: aspnet-version-detect
+
+info:
+  name: AspNet Version Disclosure - Detect
+  author: lucky0x0d,PulseSecurity.co.nz
+  severity: info
+  description: |
+    Detects version disclosed via 'X-AspNet-Version' header.
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
+    cvss-score: 0.0
+    cwe-id: CWE-200
+  metadata:
+    max-request: 1
+    verified: true
+    shodan-query: "X-AspNet-Version"
+  tags: tech,detect,aspnet
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    host-redirects: true
+    max-redirects: 3
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(tolower(header), "x-aspnet-version")'
+
+    extractors:
+      - type: kval
+        kval:
+          - X_AspNet_Version

http/technologies/microsoft/aspnetmvc-version-disclosure.yaml

@@ -0,0 +1,35 @@
+id: aspnetmvc-version-disclosure
+
+info:
+  name: AspNetMvc Version - Detect
+  author: lucky0x0d,PulseSecurity.co.nz
+  severity: info
+  description: |
+    Detects version disclosed via 'X-AspNetMvc-Version' header.
+  classification:
+    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
+    cvss-score: 0.0
+    cwe-id: CWE-200
+  metadata:
+    max-request: 1
+    verified: true
+    shodan-query: "X-AspNetMvc-Version"
+  tags: aspnetmvc,tech,detect
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    redirects: true
+    max-redirects: 4
+
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(tolower(header), "x-aspnetmvc-version")'
+
+    extractors:
+      - type: kval
+        kval:
+          - X_AspNetMvc_Version