Merge pull request #8480 from pdelteil/patch-166

Create mappproxy-detect.yaml
patch-1
pussycat0x 2023-10-27 22:00:25 +05:30 committed by GitHub
commit d9ad0f01be
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 44 additions and 0 deletions

View File

@ -0,0 +1,44 @@
id: mappproxy-detect
info:
name: Mapproxy - Detect
author: philippedelteil
severity: info
description: |
Checks for a running MapProxy instance and obtain version number. Also checks if the demo page is enabled. MapProxy is an open source proxy for geospatial data. It caches, accelerates and transforms data from existing map services and serves any desktop or web GIS client.
reference:
- https://github.com/mapproxy/mapproxy
- https://mapproxy.org
metadata:
max-request: 1
shodan-query: http.html:"Welcome to MapProxy"
tags: tech,mapproxy,detect
http:
- method: GET
path:
- "{{BaseURL}}"
- "{{BaseURL}}/demo"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- "Welcome to MapProxy"
- "MapProxy Demo"
condition: or
- type: word
part: header
words:
- "text/html"
extractors:
- type: regex
part: body
group: 1
regex:
- MapProxy(?i) ([0-9]+\.[0-9]+\.[0-9]+)