id: gradle-cache-node-detect

info:
  name: Gradle Enterprise Build Cache Node Login Panel - Detect
  author: Adam Crosser,righettod
  severity: info
  description: Gradle Enterprise Build Cache Node login panel was detected.
  reference:
    - https://gradle.com/gradle-enterprise-solutions/build-cache/
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
  metadata:
    max-request: 1
    verified: true
    shodan-query: http.html:"Gradle Enterprise Build Cache Node"
  tags: panel,gradle,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200 || status_code == 401'
          - 'contains_any(to_lower(body), "gradle enterprise build cache node", "com.gradle.error.fallback")'
        condition: and

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - '(?i)"applicationVersion":"([0-9.]+)"'
          - '(?i)Gradle\s+Enterprise\s+Build\s+Cache\s+Node\s+([0-9.]+)'
# digest: 4a0a00473045022100ba8073836921bd2932e39af0ce635832f7062f352fb84e11da9633ed35c19f4902202fbd900e540844b29ce572772b708f121bf6ff120557bbc12033405762258dcc:922c64590222798bb761d5b6d8e72950