id: google-bucket-service

info:
  name: Detect websites using Google bucket storage
  author: pdteam
  severity: info
  metadata:
    max-request: 1
  tags: google,tech,bucket

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: dsl
        dsl:
          - contains(tolower(header), 'x-goog-component-count')
          - contains(tolower(header), 'x-goog-expiration')
          - contains(tolower(header), 'x-goog-generation')
          - contains(tolower(header), 'x-goog-metageneration')
          - contains(tolower(header), 'x-goog-stored-content-encoding')
          - contains(tolower(header), 'x-goog-stored-content-length')
          - contains(tolower(header), 'x-guploader-uploadid')
        condition: or

# digest: 490a00463044022040b887c27647417769c6df019ac3faa6b310ef9ced427bead7e3ac732206f32702204b56b321bc16d2c9b9aefc9c0452c93f202ea0efb085f532ee92ce0ab52588ea:922c64590222798bb761d5b6d8e72950