diff --git a/http/technologies/microsoft/aspnet-version-detect.yaml b/http/technologies/microsoft/aspnet-version-detect.yaml new file mode 100644 index 0000000000..78d68f6e3c --- /dev/null +++ b/http/technologies/microsoft/aspnet-version-detect.yaml @@ -0,0 +1,35 @@ +id: aspnet-version-detect + +info: + name: AspNet Version Disclosure - Detect + author: lucky0x0d,PulseSecurity.co.nz + severity: info + description: | + Detects version disclosed via 'X-AspNet-Version' header. + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 + metadata: + max-request: 1 + verified: true + shodan-query: "X-AspNet-Version" + tags: tech,detect,aspnet + +http: + - method: GET + path: + - "{{BaseURL}}" + + host-redirects: true + max-redirects: 3 + + matchers: + - type: dsl + dsl: + - 'contains(tolower(header), "x-aspnet-version")' + + extractors: + - type: kval + kval: + - X_AspNet_Version diff --git a/http/technologies/microsoft/aspnetmvc-version-disclosure.yaml b/http/technologies/microsoft/aspnetmvc-version-disclosure.yaml new file mode 100644 index 0000000000..c5884c6a27 --- /dev/null +++ b/http/technologies/microsoft/aspnetmvc-version-disclosure.yaml @@ -0,0 +1,35 @@ +id: aspnetmvc-version-disclosure + +info: + name: AspNetMvc Version - Detect + author: lucky0x0d,PulseSecurity.co.nz + severity: info + description: | + Detects version disclosed via 'X-AspNetMvc-Version' header. + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N + cvss-score: 0.0 + cwe-id: CWE-200 + metadata: + max-request: 1 + verified: true + shodan-query: "X-AspNetMvc-Version" + tags: aspnetmvc,tech,detect + +http: + - method: GET + path: + - "{{BaseURL}}" + + redirects: true + max-redirects: 4 + + matchers: + - type: dsl + dsl: + - 'contains(tolower(header), "x-aspnetmvc-version")' + + extractors: + - type: kval + kval: + - X_AspNetMvc_Version