nuclei-templates/http/technologies/projectsend-detect.yaml

45 lines
1.2 KiB
YAML

id: projectsend-detect
info:
name: ProjectSend Login Panel - Detect
author: idealphase
severity: info
description: ProjectSend login panel was detected.
reference:
- https://www.exploit-db.com/ghdb/7380
- https://github.com/projectsend/projectsend
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cvss-score: 0
cwe-id: CWE-200
cpe: cpe:2.3:a:projectsend:projectsend:*:*:*:*:*:*:*:*
metadata:
max-request: 1
google-query: intext:Provided by ProjectSend
product: projectsend
vendor: projectsend
tags: tech,projectsend,edb
http:
- method: GET
path:
- '{{BaseURL}}'
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- 'Provided by <a href="https?:\/\/www\.projectsend\.org\/" target="_blank">ProjectSend<\/a>'
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- "version (.*) - Free software"
# digest: 4b0a00483046022100844c68839926a367b193bb4ac1b809a2b0fa20cd33a14f39706aaa96bec785c902210081d5dc11273e4f18fd0b2405546f90b18ed6abd458170aaed2387d5337d3c6dd:922c64590222798bb761d5b6d8e72950