From 40937f3702514d2a299acdf28e44bff08751f599 Mon Sep 17 00:00:00 2001
From: Icaro Torres <18042205+icarot@users.noreply.github.com>
Date: Sun, 19 May 2024 15:47:40 -0300
Subject: [PATCH 1/2] Create sparklighter-detect.yaml

This nuclei template detects a Spark Lighter server, a REST API for Apache Spark on K8S or YARN.
---
 http/technologies/sparklighter-detect.yaml | 27 ++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 http/technologies/sparklighter-detect.yaml

diff --git a/http/technologies/sparklighter-detect.yaml b/http/technologies/sparklighter-detect.yaml
new file mode 100644
index 0000000000..879326d922
--- /dev/null
+++ b/http/technologies/sparklighter-detect.yaml
@@ -0,0 +1,27 @@
+id: sparklighter-detect
+
+info:
+  name: Spark Lighter Detection
+  author: icarot
+  severity: info
+  description: This nuclei template detects a Spark Lighter server, a REST API for Apache Spark on K8S or YARN.
+  classification:
+    cpe: cpe:2.3:a:apache:spark:*:*:*:*:*:*:*:*
+  metadata:
+    max-request: 5
+    vendor: lighter
+    product: spark_lighter_server
+    category: productivity
+  tags: tech,lighter,spark,detect
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/lighter/api"
+      - "{{BaseURL}}/lighter/batches"
+      - "{{BaseURL}}/lighter/sessions"
+
+    matchers:
+      - type: status
+        status:
+          - 200

From 986339f584f6a6f161c4da3170b0cebca4c873b8 Mon Sep 17 00:00:00 2001
From: Dhiyaneshwaran <leedhiyanesh@gmail.com>
Date: Fri, 31 May 2024 17:53:31 +0530
Subject: [PATCH 2/2] minor update

---
 http/technologies/sparklighter-detect.yaml | 22 +++++++++++++++-------
 1 file changed, 15 insertions(+), 7 deletions(-)

diff --git a/http/technologies/sparklighter-detect.yaml b/http/technologies/sparklighter-detect.yaml
index 879326d922..95913d9fe2 100644
--- a/http/technologies/sparklighter-detect.yaml
+++ b/http/technologies/sparklighter-detect.yaml
@@ -4,24 +4,32 @@ info:
   name: Spark Lighter Detection
   author: icarot
   severity: info
-  description: This nuclei template detects a Spark Lighter server, a REST API for Apache Spark on K8S or YARN.
+  description: |
+    Detects a Spark Lighter server, a REST API for Apache Spark on K8S or YARN.
   classification:
     cpe: cpe:2.3:a:apache:spark:*:*:*:*:*:*:*:*
   metadata:
-    max-request: 5
-    vendor: lighter
-    product: spark_lighter_server
+    verified: true
+    max-request: 1
+    vendor: apache
+    product: spark
     category: productivity
   tags: tech,lighter,spark,detect
 
-requests:
+http:
   - method: GET
     path:
       - "{{BaseURL}}/lighter/api"
-      - "{{BaseURL}}/lighter/batches"
-      - "{{BaseURL}}/lighter/sessions"
 
+    matchers-condition: and
     matchers:
+      - type: word
+        part: body
+        words:
+          - '<title>Lighter</title>'
+          - '/lighter/favicon.svg'
+        condition: and
+
       - type: status
         status:
           - 200