diff --git a/contributors.json b/contributors.json index c227702062a..9011c774275 100644 --- a/contributors.json +++ b/contributors.json @@ -1499,5 +1499,15 @@ "website": "https://seqre.dev", "email": "contact@seqre.dev" } + }, + { + "author": "Masoud Abdaal", + "links": { + "github": "https://github.com/MasoudAbdaal", + "twitter": "https://x.com/0xCVEer", + "linkedin": "https://www.linkedin.com/in/masoud-abdaal/", + "website": "", + "email": "m_abdaal@outlook.com" + } } ] diff --git a/http/technologies/oqtane-db-detect.yaml b/http/technologies/oqtane-db-detect.yaml new file mode 100644 index 00000000000..4be24e6c39c --- /dev/null +++ b/http/technologies/oqtane-db-detect.yaml @@ -0,0 +1,44 @@ +id: oqtane-cms-db + +info: + name: Oqtane CMS Database - Detect + author: Masoud Abdaal + severity: info + description: Detect which database distribution the target oqtane cms use. + reference: + - https://github.com/oqtane/oqtane.framework?tab=readme-ov-file#oqtane-framework + - https://github.com/oqtane/oqtane.framework/blob/62879c3e522772830fb19c7c9af569bd6a7c2f78/Oqtane.Server/Controllers/DatabaseController.cs#L23 + classification: + cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N + cvss-score: 5.3 + cwe-id: CWE-200 + metadata: + max-request: 1 + shodan-query: http.title:'Home - Default Site' + product: oqtane + vendor: oqtane + tags: detect,tech,api,cms + +http: + - method: GET + path: + - "{{BaseURL}}/api/database" + + matchers-condition: and + matchers: + - type: status + status: + - 200 + + - type: word + part: header + words: + - 'application/json' + + extractors: + - type: json + name: default_database + part: body + json: + - '.[] | select(.isDefault == true) | .name' + \ No newline at end of file