id: mappproxy-detect

info:
  name: Mapproxy - Detect
  author: philippedelteil
  severity: info
  description: |
    Checks for a running MapProxy instance and obtain version number. Also checks if the demo page is enabled. MapProxy is an open source proxy for geospatial data. It caches, accelerates and transforms data from existing map services and serves any desktop or web GIS client.
  reference:
    - https://github.com/mapproxy/mapproxy
    - https://mapproxy.org
  metadata:
    max-request: 2
    shodan-query: http.html:"Welcome to MapProxy"
  tags: tech,mapproxy,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}"
      - "{{BaseURL}}/demo"

    host-redirects: true
    max-redirects: 2

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Welcome to MapProxy"
          - "MapProxy Demo"
        condition: or

      - type: word
        part: header
        words:
          - "text/html"

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - MapProxy(?i) ([0-9]+\.[0-9]+\.[0-9]+)

# digest: 490a0046304402202e852806bac4c6dda5526384cc56340ed79c5d8ca8d5a18c64f83d6bc4538d36022055a94d0bdf1c4a7739373f1eb2eb0c576d23f68b8cb09433bc50468ef0df81fd:922c64590222798bb761d5b6d8e72950