id: lucee-detect

info:
  name: Detect Lucee
  author: geeknik,DhiyaneshDK
  severity: info
  description: Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development -- https://github.com/lucee/Lucee/
  metadata:
    max-request: 2
    shodan-query: "html:\"Lucee\""
    fofa-query: "app=\"Lucee-Engine\""
  tags: tech,lucee

http:
  - method: GET
    path:
      - "{{BaseURL}}/lucee/doc/functions.cfm"
      - "{{BaseURL}}"

    stop-at-first-match: true
    matchers-condition: or
    matchers:
      - type: regex
        part: header
        regex:
          - "(?i)X-Lucee-Version"
          - "(?i)X-CB-Server: LUCEE"
          - "(?i)X-IDG-Appserver: Lucee"
        condition: or

      - type: word
        part: body
        words:
          - "Lucee Function Reference"
# digest: 4a0a00473045022075f26792907c6d74be5f38bbe41be081199595519e306502ecd4bdfee409f2f7022100b02b3b2ac7b94271edb6835e15e0b302f6270605125e9312412d075effba137d:922c64590222798bb761d5b6d8e72950