From 7b91700ef4ee1d5925814da8d1021034f508a2ef Mon Sep 17 00:00:00 2001
From: "M. Dehghani" <mohammadamindehghani@pm.me>
Date: Sat, 11 May 2024 14:27:11 +0330
Subject: [PATCH] Add umami version detector

---
 http/technologies/umami-version.yaml | 32 ++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 http/technologies/umami-version.yaml

diff --git a/http/technologies/umami-version.yaml b/http/technologies/umami-version.yaml
new file mode 100644
index 00000000000..e72bd8b47e5
--- /dev/null
+++ b/http/technologies/umami-version.yaml
@@ -0,0 +1,32 @@
+id: umami-version
+
+info:
+  name: Umami Version - Detect
+  author: userdehghani
+  severity: info
+  metadata:
+    max-request: 1
+    shodan-query: http.favicon.hash:-130447705
+  tags: tech,umami,detect
+
+http:
+  - method: GET
+    path:
+      - "{{BaseURL}}/~404"
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        part: body
+        regex:
+          - 'v(?P<version>\d+\.\d+\.\d+)'
+
+      - type: status
+        status:
+          - 404
+
+    extractors:
+      - type: regex
+        part: body
+        regex:
+          - 'v(?P<version>\d+\.\d+\.\d+)'