Files
nuclei-templates/http/technologies/cryptshare-detect.yaml
2025-06-21 00:54:11 +00:00

49 lines
1.3 KiB
YAML

id: cryptshare-detect
info:
name: Pointsharp Cryptshare - Detect
author: darses
severity: info
description: |
Detects the presence of Pointsharp Cryptshare secure email and file sharing server.
metadata:
verified: true
max-request: 3
shodan-query:
- http.favicon.hash:-672476364
- http.favicon.hash:-1059646869
- "Set-Cookie: cs-ui-session="
fofa-query:
- icon_hash="-672476364"
- icon_hash="-1059646869"
- "Set-Cookie: cs-ui-session="
vendor: pointsharp
product: cryptshare
reference:
- https://www.pointsharp.com/en/products/cryptshare
tags: detect,tech,cryptshare
http:
- method: GET
path:
- "{{BaseURL}}/Start?0"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- 'name="generator" content="Cryptshare'
extractors:
- type: regex
name: version
part: body
regex:
- '<span>([\d\.]+)</span>\n<span>licensed for</span>'
group: 1
# digest: 4b0a00483046022100baba508816cc301e61692b8c0602b5f1c968f6670976f6c26a937c7fd351fc98022100fb70958ed02c6e218e5a4d7ef2d85a41dde734d7b98b9acb670ab5f46e50620e:922c64590222798bb761d5b6d8e72950