id: jsf-detection

info:
  name: JavaServer Faces Detection
  author: Moritz Nentwig
  severity: info
  description: Searches for JavaServer Faces content on a URL.
  tags: jsf,tech

requests:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true
    max-redirects: 2
    matchers:
      - type: word
        words:
          - "javax.faces.resource"
          - "javax.faces.ViewState"
        condition: or