nuclei-templates/http/exposed-panels/alfresco-detect.yaml

44 lines
1.2 KiB
YAML

id: alfresco-detect
info:
name: Alfresco CMS Detection
author: pathtaga
severity: info
description: Alfresco CMS was discovered.
reference:
- https://www.alfresco.com/
classification:
cwe-id: CWE-200
cpe: cpe:2.3:a:alfresco:alfresco:*:*:*:*:android:*:*:*
metadata:
max-request: 1
product: alfresco
vendor: alfresco
tags: alfresco,tech,panel
http:
- method: GET
path:
- "{{BaseURL}}/alfresco/api/-default-/public/cmis/versions/1.1/atom"
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'org\/alfresco\/api\/opencmis\/OpenCMIS.get'
- type: word
part: header
words:
- "application/json"
extractors:
- type: regex
part: body
group: 1
regex:
- 'Enterprise v.*([0-9]\.[0-9]+\.[0-9]+)'
- 'Community v.*([0-9]\.[0-9]+\.[0-9]+)'
- 'Community Early Access v.*([0-9]\.[0-9]+\.[0-9]+)'
# digest: 4b0a004830460221008d893c552b5e2bdde2631fec4d5ef9896421e1175b5b11b2eae4652101a550a0022100d2ae2342988557ee19fe02dfc809028429ddb4ff01d94fadf67709aa6cabcef2:922c64590222798bb761d5b6d8e72950