id: telerik-fileupload-detect

info:
  name: Detect Telerik Web UI Fileupload Handler
  author: organiccrap
  severity: info
  description: This template detects the Telerik Web UI fileupload handler.
  metadata:
    max-request: 1
  tags: tech,telerik,fileupload,intrusive

http:
  - method: GET
    path:
      - "{{BaseURL}}/Telerik.Web.UI.WebResource.axd?type=rau"

    matchers:
      - type: word
        words:
          - "RadAsyncUpload handler is registered succesfully"
# digest: 4b0a00483046022100e0bf2456d3488ffd4ecc9e4d52373c1ccc739b42bd3dcd9e8131adcb05ff3321022100800d17a30f9c37f2ee331536f3492caac7ef6c2a64a9ff587b55e9252f329dd7:922c64590222798bb761d5b6d8e72950