30 lines
840 B
YAML
30 lines
840 B
YAML
id: cloudfoundry-detect
|
|
|
|
info:
|
|
name: Cloudfoundry Detect
|
|
author: uomogrande
|
|
severity: info
|
|
description: Detects cloudfoundry based on response headers
|
|
reference: https://docs.cloudfoundry.org/concepts/cf-routing-architecture.html
|
|
metadata:
|
|
max-request: 2
|
|
tags: cloudfoundry,tech
|
|
|
|
http:
|
|
- raw:
|
|
- |
|
|
GET / HTTP/1.1
|
|
Host: {{Hostname}}
|
|
# request unknown (random) route
|
|
- |
|
|
GET / HTTP/1.1
|
|
Host: {{randstr}}.com
|
|
|
|
stop-at-first-match: true
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- 'contains(header, "X-Vcap-Request-Id:") || contains(header, "X-Cf-Routererror:")'
|
|
|
|
# digest: 4a0a004730450220569eab2454f8fca52f292a3b194b4c8ad1f1c8036854c1cf3cee525e598ac8c9022100b6a2e06f7237e2f954b55df0c00afd9385625658ea3d63f3f1453a1b330c1a01:922c64590222798bb761d5b6d8e72950
|