diff --git a/http/technologies/tibco-spotfire-services-detect.yaml b/http/technologies/tibco-spotfire-services-detect.yaml new file mode 100644 index 0000000000..78e1eee444 --- /dev/null +++ b/http/technologies/tibco-spotfire-services-detect.yaml @@ -0,0 +1,38 @@ +id: tibco-spotfire-services-detect + +info: + name: TIBCO Spotfire Statistics Services - Detect + author: righettod + severity: info + description: | + TIBCO Spotfire Statistics Services was detected. + reference: + - https://docs.tibco.com/products/tibco-spotfire-statistics-services + metadata: + max-request: 4 + verified: true + shodan-query: "TIBCO Spotfire Server" + tags: tech,tibco,detect + +http: + - method: GET + path: + - "{{BaseURL}}/SplusServer/" + - "{{BaseURL}}/RServer/" + - "{{BaseURL}}/TERR/" + - "{{BaseURL}}" + + stop-at-first-match: true + matchers: + - type: dsl + dsl: + - 'contains_any(to_lower(body), "tibco spotfire statistics services", "spotfire statistics services")' + - 'contains(header, "TIBCO Spotfire Server")' + condition: or + + extractors: + - type: regex + part: body + group: 1 + regex: + - 'Version\s+([0-9.\s\(\)V]+)'