Merge pull request #10502 from righettod/axway-api-gtw_upd

Refactor the "Axway API Manager" template.
main
Dhiyaneshwaran 2024-08-13 16:11:32 -07:00 committed by GitHub
commit d19de91ad5
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 20 additions and 11 deletions

View File

@ -2,27 +2,36 @@ id: axway-api-manager-panel
info:
name: Axway API Manager Panel - Detect
author: johnk3r
author: johnk3r,righettod
severity: info
description: Axway API Manager panel was detected.
reference:
- https://docs.axway.com/bundle/axway-open-docs/page/docs/index.html
- https://www.postman.com/api-evangelist/axway/api/06c40de2-3954-4c68-ae10-a7eded330b05
- https://www.postman.com/api-evangelist/axway/api/ce2ac156-4353-46b9-b148-944ab7721ed6
metadata:
verified: true
max-request: 1
shodan-query: http.title:"Axway API Manager Login"
tags: panel,axway,detect
tags: panel,axway,detect,login
http:
- method: GET
path:
- "{{BaseURL}}/api/portal/v1.4/appinfo"
- "{{BaseURL}}"
matchers-condition: and
stop-at-first-match: true
matchers:
- type: word
part: body
words:
- "Axway API Manager Login</title>"
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "axway api manager login", "vordel/apiportal/app-login")'
condition: and
- type: status
status:
- 200
# digest: 4b0a004830460221009806e6b46f0d419351aea507da113cdc16e7d0bb46d91d3356f8404c5aacd303022100d97a07a55afba6cc59ae9c4884f13cdff91afe76fb8f880dfe067c7e963d6920:922c64590222798bb761d5b6d8e72950
extractors:
- type: regex
part: body
group: 1
regex:
- '"productVersion":\s*"([0-9.]+)"'