From f8ec45356e47d11a6a77bc540de71dda4ae7f37a Mon Sep 17 00:00:00 2001 From: Paolo Serra Date: Thu, 1 Jan 1970 00:00:00 +0000 Subject: [PATCH 1/5] Added template for uni-gui-framework-detection --- uni-gui-framework-detection.yaml | 39 ++++++++++++++++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 uni-gui-framework-detection.yaml diff --git a/uni-gui-framework-detection.yaml b/uni-gui-framework-detection.yaml new file mode 100644 index 00000000000..af1c00c6e3e --- /dev/null +++ b/uni-gui-framework-detection.yaml @@ -0,0 +1,39 @@ +id: uni-gui-framework-detection + +info: + name: Detect UniGUI Framework and Version + author: serrapa + severity: info + description: Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version. + +requests: + - method: GET + path: + - "{{BaseURL}}/" + + matchers-condition: and + matchers: + - type: word + words: + - "uni-xtheme-" + - "ext-all.js" + - "uniVars._extVer=" + condition: or + part: body + - type: regex + regex: + - 'uni-(\d+\.\d+\.\d+\.\d+)/' + - 'uniVars._extVer="(\d+\.\d+\.\d+)"' + part: body + extractors: + - type: regex + regex: + - 'uni-(\d+\.\d+\.\d+\.\d+)/' + part: body + name: uni_gui_version + - type: regex + regex: + - 'uniVars._extVer="(\d+\.\d+\.\d+)"' + part: body + name: ext_js_version + From adff13fd67d560dd9ec5189dcceecca46a1cb97d Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Mon, 13 May 2024 21:00:13 +0530 Subject: [PATCH 2/5] Update uni-gui-framework-detection.yaml --- uni-gui-framework-detection.yaml | 41 ++++++++++++++++++++------------ 1 file changed, 26 insertions(+), 15 deletions(-) diff --git a/uni-gui-framework-detection.yaml b/uni-gui-framework-detection.yaml index af1c00c6e3e..e40a8a012f2 100644 --- a/uni-gui-framework-detection.yaml +++ b/uni-gui-framework-detection.yaml @@ -1,39 +1,50 @@ -id: uni-gui-framework-detection +id: uni-gui-framework -info: - name: Detect UniGUI Framework and Version - author: serrapa - severity: info - description: Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version. - -requests: +info: + name: UniGUI Framework - Detect + author: serrapa + severity: info + description: | + Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version. + metadata: + verified: true + max-request: 1 + shodan-query: http.title:"UniGUI" + tags: tech,unigui + +http: - method: GET path: - "{{BaseURL}}/" + host-redirects: true + max-redirects: 2 + matchers-condition: and matchers: - type: word + part: body words: - "uni-xtheme-" - "ext-all.js" - "uniVars._extVer=" condition: or - part: body + - type: regex + part: body regex: - 'uni-(\d+\.\d+\.\d+\.\d+)/' - 'uniVars._extVer="(\d+\.\d+\.\d+)"' - part: body + extractors: - type: regex - regex: - - 'uni-(\d+\.\d+\.\d+\.\d+)/' part: body name: uni_gui_version - - type: regex regex: - - 'uniVars._extVer="(\d+\.\d+\.\d+)"' + - 'uni-(\d+\.\d+\.\d+\.\d+)' + + - type: regex part: body name: ext_js_version - + regex: + - 'uniVars._extVer="(\d+\.\d+\.\d+)"' From 5ac2a9916133b6a6a330022750f98e7442230685 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Mon, 13 May 2024 23:10:16 +0530 Subject: [PATCH 3/5] Update and rename uni-gui-framework-detection.yaml to http/technologies/uni-gui-framework.yaml --- .../technologies/uni-gui-framework.yaml | 20 +++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) rename uni-gui-framework-detection.yaml => http/technologies/uni-gui-framework.yaml (69%) diff --git a/uni-gui-framework-detection.yaml b/http/technologies/uni-gui-framework.yaml similarity index 69% rename from uni-gui-framework-detection.yaml rename to http/technologies/uni-gui-framework.yaml index e40a8a012f2..5f9d6f5c1da 100644 --- a/uni-gui-framework-detection.yaml +++ b/http/technologies/uni-gui-framework.yaml @@ -37,14 +37,14 @@ http: - 'uniVars._extVer="(\d+\.\d+\.\d+)"' extractors: - - type: regex - part: body - name: uni_gui_version - regex: - - 'uni-(\d+\.\d+\.\d+\.\d+)' + - type: regex + part: body + name: uni_gui_version + regex: + - 'uni-(\d+\.\d+\.\d+\.\d+)' - - type: regex - part: body - name: ext_js_version - regex: - - 'uniVars._extVer="(\d+\.\d+\.\d+)"' + - type: regex + part: body + name: ext_js_version + regex: + - 'uniVars._extVer="(\d+\.\d+\.\d+)"' From 6a7c37fbad312c4e0fedb47a852775013acb67e6 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Mon, 13 May 2024 23:12:07 +0530 Subject: [PATCH 4/5] remove / --- http/technologies/uni-gui-framework.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/http/technologies/uni-gui-framework.yaml b/http/technologies/uni-gui-framework.yaml index 5f9d6f5c1da..a0654b54b35 100644 --- a/http/technologies/uni-gui-framework.yaml +++ b/http/technologies/uni-gui-framework.yaml @@ -15,7 +15,7 @@ info: http: - method: GET path: - - "{{BaseURL}}/" + - "{{BaseURL}}" host-redirects: true max-redirects: 2 From e44a8de207e0b6c1312d21d9a27fad466da18770 Mon Sep 17 00:00:00 2001 From: Dhiyaneshwaran Date: Mon, 13 May 2024 23:13:43 +0530 Subject: [PATCH 5/5] Update uni-gui-framework.yaml