diff --git a/http/technologies/mappproxy-detect.yaml b/http/technologies/mappproxy-detect.yaml new file mode 100644 index 0000000000..41da5847f6 --- /dev/null +++ b/http/technologies/mappproxy-detect.yaml @@ -0,0 +1,44 @@ +id: mappproxy-detect + +info: + name: Mapproxy - Detect + author: philippedelteil + severity: info + description: | + Checks for a running MapProxy instance and obtain version number. Also checks if the demo page is enabled. MapProxy is an open source proxy for geospatial data. It caches, accelerates and transforms data from existing map services and serves any desktop or web GIS client. + reference: + - https://github.com/mapproxy/mapproxy + - https://mapproxy.org + metadata: + max-request: 1 + shodan-query: http.html:"Welcome to MapProxy" + tags: tech,mapproxy,detect + +http: + - method: GET + path: + - "{{BaseURL}}" + - "{{BaseURL}}/demo" + + host-redirects: true + max-redirects: 2 + matchers-condition: and + matchers: + - type: word + part: body + words: + - "Welcome to MapProxy" + - "MapProxy Demo" + condition: or + + - type: word + part: header + words: + - "text/html" + + extractors: + - type: regex + part: body + group: 1 + regex: + - MapProxy(?i) ([0-9]+\.[0-9]+\.[0-9]+)