nuclei-templates/http/technologies/cobbler-version.yaml

41 lines
795 B
YAML

id: cobbler-version
info:
name: Cobbler Version Detection
author: c-sh0
severity: info
description: Obtain cobbler version information
tags: tech,cobbler,api
http:
- method: POST
path:
- "{{BaseURL}}/cobbler_api"
body: |
<?xml version='1.0'?>
<methodCall>
<methodName>extended_version</methodName>
<params></params>
</methodCall>
headers:
Content-Type: text/xml
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- '<name>version</name>'
extractors:
- type: regex
part: body
group: 1
regex:
- "<value><string>([0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3})</string></value>"