nuclei-templates/http/exposed-panels/axway-api-manager-panel.yaml

38 lines
1.0 KiB
YAML

id: axway-api-manager-panel
info:
name: Axway API Manager Panel - Detect
author: johnk3r,righettod
severity: info
description: Axway API Manager panel was detected.
reference:
- https://docs.axway.com/bundle/axway-open-docs/page/docs/index.html
- https://www.postman.com/api-evangelist/axway/api/06c40de2-3954-4c68-ae10-a7eded330b05
- https://www.postman.com/api-evangelist/axway/api/ce2ac156-4353-46b9-b148-944ab7721ed6
metadata:
verified: true
max-request: 1
shodan-query: http.title:"Axway API Manager Login"
tags: panel,axway,detect,login
http:
- method: GET
path:
- "{{BaseURL}}/api/portal/v1.4/appinfo"
- "{{BaseURL}}"
stop-at-first-match: true
matchers:
- type: dsl
dsl:
- 'status_code == 200'
- 'contains_any(to_lower(body), "axway api manager login", "vordel/apiportal/app-login")'
condition: and
extractors:
- type: regex
part: body
group: 1
regex:
- '"productVersion":\s*"([0-9.]+)"'