nuclei-templates/http/technologies/influxdb-version-detect.yaml

40 lines
1.1 KiB
YAML

id: influxdb-version-detect
info:
name: InfluxDB Version Information - Detect
author: c-sh0
severity: info
description: InfluxDB version information check was conducted.
reference:
- https://docs.influxdata.com/influxdb/v1.8/tools/api/#ping-http-endpoint
- https://github.com/influxdata/influxdb/blob/master/http/platform_handler.go#L62
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
cpe: cpe:2.3:a:influxdata:influxdb:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
shodan-query: "X-Influxdb-"
product: influxdb
vendor: influxdata
tags: tech,influxdb,api
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: header
words:
- 'X-Influxdb-'
extractors:
- type: kval
kval:
- "X_Influxdb_Version"
# digest: 4b0a00483046022100e54b69bd5fb63a7ac0fa802fe4662ac9ca226acb537cdc04602882578551327f0221009e5ef982f39b7d10d941245c9aea7d081a0711cd9a6f78412aac421fa64e3d5a:922c64590222798bb761d5b6d8e72950