misc updates

patch-1
sandeep 2021-11-13 01:39:02 +05:30
parent 981b6787eb
commit e79f7c4a91
4 changed files with 14 additions and 25 deletions

View File

@ -5,18 +5,17 @@ info:
author: Adam Crosser author: Adam Crosser
severity: info severity: info
description: Detects ADFS with forms-based authentication enabled. description: Detects ADFS with forms-based authentication enabled.
tags: tech,ADFS tags: tech,adfs
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/adfs/ls/idpinitiatedsignon.aspx" - "{{BaseURL}}/adfs/ls/idpinitiatedsignon.aspx"
redirects: false
stop-at-first-match: true
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: word - type: word
part: body
words: words:
- '/adfs/portal/css/style.css' - '/adfs/portal/css/style.css'
part: body

View File

@ -5,18 +5,15 @@ info:
author: Adam Crosser author: Adam Crosser
severity: info severity: info
description: Detects the Argo CD website console description: Detects the Argo CD website console
tags: tech,ArgoCD tags: tech,argocd
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
redirects: false
stop-at-first-match: false
matchers-condition: and
matchers: matchers:
- type: word - type: word
part: body
words: words:
- '<title>Argo CD' - '<title>Argo CD'
part: body

View File

@ -5,18 +5,15 @@ info:
author: Adam Crosser author: Adam Crosser
severity: info severity: info
description: Detects the GraphiQL application description: Detects the GraphiQL application
tags: tech,ADFS tags: tech,graphiql,graphql
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/" - "{{BaseURL}}"
redirects: false
stop-at-first-match: true
matchers-condition: or
matchers: matchers:
- type: word - type: word
part: body
words: words:
- '<title>GraphiQL' - '<title>GraphiQL'
part: body

View File

@ -5,19 +5,15 @@ info:
author: Adam Crosser author: Adam Crosser
severity: info severity: info
description: Detects HashiCorp Vault description: Detects HashiCorp Vault
tags: tech,HashiCorp,Vault tags: tech,hashicorp
requests: requests:
- method: GET - method: GET
path: path:
- "{{BaseURL}}/ui/vault/auth" - "{{BaseURL}}/ui/vault/auth"
redirects: false
stop-at-first-match: true
matchers-condition: and
matchers: matchers:
- type: word - type: word
part: body
words: words:
- '<meta name="vault/config/environment"' - '<meta name="vault/config/environment"'
part: body