Files
nuclei-templates/http/technologies/zap-api-detect.yaml
2025-10-26 16:17:37 +00:00

26 lines
707 B
YAML

id: zap-rest-api-detect
info:
name: ZAP Rest API Server Running
author: hahwul
severity: info
reference:
- https://www.zaproxy.org/docs/api/
metadata:
max-request: 1
tags: zap,tech,discovery
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: word
part: response
words:
- '<title>ZAP API UI</title>'
- 'Welcome to the OWASP Zed Attack Proxy (ZAP)'
- 'Access-Control-Allow-Headers: ZAP-Header'
condition: or
# digest: 4a0a00473045022100b435608cad3e423aee18e2a10205359eea4456519ef6350be354eac7e91222fe022009db641701eca2e4e6171942035eea7d4b754b649236aaa8e41abc3b9982906a:922c64590222798bb761d5b6d8e72950