From e51ea455d5bbed7fa5bba36e6a5d207c181e4ab4 Mon Sep 17 00:00:00 2001
From: geeknik <466878+geeknik@users.noreply.github.com>
Date: Fri, 7 Oct 2022 19:54:18 +0000
Subject: [PATCH] Create x-recruiting-header.yaml

---
 miscellaneous/x-recruiting-header.yaml | 28 ++++++++++++++++++++++++++
 1 file changed, 28 insertions(+)
 create mode 100644 miscellaneous/x-recruiting-header.yaml

diff --git a/miscellaneous/x-recruiting-header.yaml b/miscellaneous/x-recruiting-header.yaml
new file mode 100644
index 00000000000..a595fe40830
--- /dev/null
+++ b/miscellaneous/x-recruiting-header.yaml
@@ -0,0 +1,28 @@
+id: x-recruiting-header
+
+info:
+  name: X-Recruiting Header
+  author: geeknik
+  severity: info
+  description: Websites that advertise jobs via HTTP headers
+  reference:
+    - https://www.shodan.io/search?query=%22X-Recruiting%3A%22
+  tags: hiring,jobs,employment
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    redirects: true
+    matchers:
+      - type: word
+        words:
+          - 'X-Recruiting:'
+        part: header
+
+    extractors:
+      - type: regex
+        regex:
+          - 'X-Recruiting:.*'
+        part: header