nuclei-templates/technologies/nextcloud-detect.yaml

43 lines
869 B
YAML

id: nextcloud-detect
info:
name: Nextcloud Detect
author: skeltavik
severity: info
description: |
Nextcloud is a suite of client-server software for creating and using file hosting services
reference:
- https://nextcloud.com
metadata:
verified: true
shodan-query: http.title:"Nextcloud"
tags: tech,nextcloud,storage
requests:
- method: GET
path:
- '{{BaseURL}}'
- '{{BaseURL}}/login'
- '{{BaseURL}}/nextcloud/index.php/login'
stop-at-first-match: true
redirects: true
max-redirects: 2
matchers:
- type: word
part: body
words:
- 'var nc_lastLogin'
- 'var nc_pageLoad'
condition: and
- type: status
status:
- 200
extractors:
- type: regex
group: 1
regex:
- '(?m)"version":"([0-9.]+)",'