nuclei-templates/http/exposures/apis/seafile-api.yaml

52 lines
1.2 KiB
YAML

id: seafile-api
info:
name: Seafile API - Detect
author: righettod
severity: info
description: |
Seafile API was detected.
reference:
- https://download.seafile.com/published/web-api/home.md
- https://manual.seafile.com/
- https://www.seafile.com/en/home/
classification:
cpe: cpe:2.3:a:seafile:seafile:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: seafile
product: seafile
shodan-query: http.html:"seafile"
tags: exposure,api,detect
http:
- method: GET
path:
- '{{BaseURL}}/api2/server-info/'
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'seafile-basic'
- 'seafile-pro'
condition: or
- type: word
part: header
words:
- 'application/json'
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- '"version":\s*"([0-9.]+)"'
# digest: 4a0a0047304502210082939c79990705ca212cbd83fc6f62b7a0bae09bf1a3825c23c6e4c6df048e0302202e1f639bb39759f9ab0df1fd28aa7486c1879454294e2bdee3ec1bdc909d95d4:922c64590222798bb761d5b6d8e72950