id: web-server

info:
  name: Detect web server daemon
  author: fabaff
  severity: low

requests:
  - method: GET
    path:
      - "{{BaseURL}}/"
    matchers-condition: or
    matchers:
      - type: word
        name: apache
        words:
          - "Apache"
        part: header
      - type: word
        name: lighttpd
        words:
          - "lighttpd"
        part: header
      - type: word
        name: lighttpd
        words:
          - "lighttpd"
        part: header
      - type: word
        name: wsgiserver
        words:
          - "WSGIServer"
        part: header
      - type: word
        name: simplehttp
        words:
          - "SimpleHTTP"
        part: header
      - type: word
        name: twistedweb
        words:
          - "TwistedWeb"
        part: header