id: flutter-web-detect

info:
  name: Flutter Web Application - Detect
  author: incogbyte
  severity: info
  description: |
    Detect flutter web apps looking for flutter_bootstrap.js,main.dart.js and flutter_service_worker.js files.
  metadata:
    max-request: 1
    verified: true
    shodan-query: http.html:"flutter_bootstrap.js"
    fofa-query: body="flutter_bootstrap.js"
  tags: tech,detect,flutter

http:
  - method: GET
    path:
      - "{{BaseURL}}/flutter_service_worker.js"
      - "{{BaseURL}}/main.dart.js"
      - "{{BaseURL}}/flutter_bootstrap.js"

    stop-at-first-match: true
    matchers:
      - type: word
        part: body
        words:
          - "_flutter.loader.didCreateEngineInitializer"
          - "_flutter.buildConfig"
          - "flutter-app-manifest"
          - "flutter-temp-cache"
          - "flutter-app-cache"
          - "ext.flutter.disassemble"
          - "#flutterweb-theme"
        condition: or
# digest: 490a0046304402202abf1439c1176c15f2a1c2a7c808db0231aae35fef91b1015d48545d0793751b02203f19917b106a3908d47e581753989496d9ef18e530be56bc2cde1b7e33e08858:922c64590222798bb761d5b6d8e72950