id: kubernetes-version

info:
  name: Kubernetes Version Exposure
  author: raesene
  description: Searches for exposed Kubernetes API servers which return version information unauthenticated
  severity: info
  tags: tech,k8s,kubernetes,devops

requests:
  - method: GET
    path:
      - "{{BaseURL}}/version"

    matchers:
      - type: word
        words:
          - "gitVersion"
          - "goVersion"
          - "platform"
        condition: and