id: sap-nw-webgui

info:
  name: SAP NetWeaver WebGUI Detection
  author: randomstr1ng
  description: Detection of SAP NetWeaver ABAP Webserver WebGUI
  severity: info
  tags: sap,webserver

requests:
  - method: GET
    path:
      - "{{BaseURL}}/sap/bc/gui/sap/its/webgui"

    redirects: true
    max-redirects: 2
    matchers:
      - type: word
        part: body
        words:
          - "sap-system-login"
          - "<title>Logon</title>"
        condition: or