Files
nuclei-templates/http/technologies/cryptshare-detect.yaml
2025-10-26 16:17:37 +00:00

49 lines
1.3 KiB
YAML

id: cryptshare-detect
info:
name: Pointsharp Cryptshare - Detect
author: darses
severity: info
description: |
Detects the presence of Pointsharp Cryptshare secure email and file sharing server.
metadata:
verified: true
max-request: 3
shodan-query:
- http.favicon.hash:-672476364
- http.favicon.hash:-1059646869
- "Set-Cookie: cs-ui-session="
fofa-query:
- icon_hash="-672476364"
- icon_hash="-1059646869"
- "Set-Cookie: cs-ui-session="
vendor: pointsharp
product: cryptshare
reference:
- https://www.pointsharp.com/en/products/cryptshare
tags: detect,tech,cryptshare,discovery
http:
- method: GET
path:
- "{{BaseURL}}/Start?0"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- 'name="generator" content="Cryptshare'
extractors:
- type: regex
name: version
part: body
regex:
- '<span>([\d\.]+)</span>\n<span>licensed for</span>'
group: 1
# digest: 490a00463044022069af7da3be1cdd409c51803e17f37f3aa99ea3fdbd8a1b338a835c9c0f67693702201dcaa72adde6d4d3db42eebfa145aa7b31d76761b40c8f717f6c269207adff77:922c64590222798bb761d5b6d8e72950