id: akamai-bot-manager-detect

info:
  name: Akamai Bot Manager Protection - Detect
  author: Fazle Arefin
  severity: info
  description: |
    Checks if the website is protected by Akamai Bot Manager
  reference:
    - https://www.akamai.com/legal/manage-cookie-preferences
    - https://techdocs.akamai.com/identity-cloud/docs/hosted-login-cookies-and-local-storage-1
  metadata:
    max-request: 1
  tags: akamai,bot,security,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: regex
        part: header
        regex:
          - 'Set-Cookie:\s*_abck='
          - 'Set-Cookie:\s*bm_sv='
          - 'Set-Cookie:\s*ak_bmsc='
          - 'Set-Cookie:\s*bm_sz='
          - 'Set-Cookie:\s*bm_mi='
        condition: or