Files
nuclei-templates/http/technologies/cisco-asa-detect.yaml
2024-12-01 13:57:55 +00:00

37 lines
792 B
YAML

id: cisco-asa-detect
info:
name: Cisco ASA - Detect
author: sdcampbell
severity: info
metadata:
max-request: 1
tags: tech,cisco,detect
http:
- raw:
- |
GET / HTTP/1.1
Host: {{Hostname}}
X-Aggregate-Auth: 1
TESTME
matchers-condition: and
matchers:
- type: word
part: body
words:
- 'config-auth client="vpn"'
- type: status
status:
- 200
extractors:
- type: regex
part: body
group: 1
regex:
- "<version who=\"sg\">(.*?)</version>"
# digest: 4b0a00483046022100cc19a34188eb881cd8d571979d5e513d133d3f46465a788e7c93e6168378d8d7022100ae1d52e3fcb113c5b851814fd48cdb34b37b9de38d3ad5f1baf35485855a903f:922c64590222798bb761d5b6d8e72950