Improve drupal detection on tech-detect and drop cms-detect

tech-detect does a better job with more cms than cms-detect, strings from cms-detect added for drupal. wordpress detection on tech-detect is ok. Fix #289
patch-1
un-fmunozs 2020-08-07 16:14:24 -05:00
parent 84d4e2ab5a
commit c21eccd8e6
2 changed files with 4 additions and 29 deletions

View File

@ -1,28 +0,0 @@
id: cms-detect
info:
name: CMS Detect
author: NkxxkN https://twitter.com/NkkxN
severity: info
requests:
- method: GET
path:
- "{{BaseURL}}/"
matchers-condition: or
matchers:
- type: word
name: drupal
words:
- "X-Drupal"
- "x-drupal"
- "X-Generator: Drupal"
condition: or
part: header
- type: word
name: wordpress
words:
- "/wp-content/"
- "/wp-includes/"
condition: or
part: body

View File

@ -1827,8 +1827,11 @@ requests:
name: drupal
regex:
- <(?:link|style)[^>]+"/sites/(?:default|all)/(?:themes|modules)/
- "X-Drupal"
- "x-drupal"
- "X-Generator: Drupal"
condition: or
part: body
part: all
- type: regex
name: webxpay
regex: