nuclei-templates/http/exposed-panels/alfresco-detect.yaml

45 lines
1.1 KiB
YAML

id: alfresco-detect
info:
name: Alfresco CMS Detection
author: pathtaga
severity: info
description: Alfresco CMS was discovered.
reference:
- https://www.alfresco.com/
classification:
cwe-id: CWE-200
metadata:
vendor: alfresco
product: alfresco
max-request: 1
tags: alfresco,tech,panel
http:
- method: GET
path:
- "{{BaseURL}}/alfresco/api/-default-/public/cmis/versions/1.1/atom"
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'org\/alfresco\/api\/opencmis\/OpenCMIS.get'
- type: word
part: header
words:
- "application/json"
extractors:
- type: regex
part: body
group: 1
regex:
- 'Enterprise v.*([0-9]\.[0-9]+\.[0-9]+)'
- 'Community v.*([0-9]\.[0-9]+\.[0-9]+)'
- 'Community Early Access v.*([0-9]\.[0-9]+\.[0-9]+)'
# digest: 4a0a004730450221009b995adb2dca15d890e554377536517c60991a82c2a17469c55d90d98681bf75022052092f97bb8b1867a95f7b3b0b0e5744d997f793a681a63140f2981d666443a0:922c64590222798bb761d5b6d8e72950