nuclei-templates/http/technologies/google/chromecast-detect.yaml

40 lines
1.1 KiB
YAML

id: chromecast-detect
info:
name: Google Chromecast - Detect
author: LucianNitescu
severity: info
description: |
Searches for Google Chromecast via their eureka_info route.
reference:
- https://github.com/thewhiteh4t/killcast/blob/ee81cfa03c963d47d3335770fcea2ca48bddeabf/killcast.py#L100C25-L100C43
- https://rithvikvibhu.github.io/GHLocalApi/#section/Google-Home-Local-API/Authentication
classification:
cpe: cpe:2.3:h:google:chromecast:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: google
product: chromecast
shodan-query: Chromecast
tags: google,chromecast,detect
http:
- raw:
- |
GET /setup/eureka_info HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers:
- type: word
part: body
words:
- '"cast_build_revision":'
- '"ssdp_udn":'
condition: and
- type: status
status:
- 200
# digest: 490a0046304402207fa978c65daef0f3009d47eb3c4d87103975a9d802ee68523034232c2be98db9022056f761bc49f8b2327d16dddc707f172285ca9fbc4c841d0dcc44c1a0789ec2c9:922c64590222798bb761d5b6d8e72950