id: atlassian-connect-descriptor

info:
  name: Atlassian Connect Descriptor - Detect
  author: pussycat0x
  severity: info
  description: |
    The app descriptor is a JSON file ( atlassian-connect. json ) that describes the app to the Atlassian application. The descriptor includes general information for the app, as well as the modules that the app wants to use or extend.
  reference:
    - https://developer.atlassian.com/cloud/jira/platform/connect-app-descriptor/
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"atlassian-connect.json"
  tags: atlassian,tech,jira

http:
  - method: GET
    path:
      - "{{BaseURL}}/atlassian-connect.json"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '"name":'
          - '"vendor":'
          - '"key":'
          - '"baseUrl":'
          - '"authentication":'
        condition: and

      - type: word
        part: header
        words:
          - application/json

      - type: status
        status:
          - 200

# digest: 4b0a00483046022100956c6d2ffd810c666c5aba67797ff15eb791ec0dcedd8086f0d467a5a60e721f022100f26697465cb78e1b64258b7bc9f70a19894c016154faef9899abcbddf0f438dc:922c64590222798bb761d5b6d8e72950