mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-02-08 19:53:15 +08:00
c83d035fff
* Edit magmi workflow * Add some workflow template + edit some template * Changing some templates * minor update * workflow matcher fixes * tech update * Seperate technology template * Update metabase-panel.yaml * Update lucee-detect.yaml * Update oneblog-detect.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update gespage-panel.yaml * Update gespage-panel.yaml * Update mautic-crm-panel.yaml * Update kibana-panel.yaml * Update metabase-panel.yaml * Update home-assistant-detect.yaml * Update jitsi-meet-detect.yaml * Update lucee-detect.yaml * Update gotmls-plugin-lfi.yaml * Update and rename technologies/opencast-detect.yaml to exposed-panels/opencast-detect.yaml * duplicate template - cves/2020/CVE-2020-11738.yaml Co-authored-by: sandeep <sandeep@projectdiscovery.io> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
42 lines
824 B
YAML
42 lines
824 B
YAML
id: linkerd-badrule-detect
|
|
|
|
info:
|
|
name: Linkerd detection via bad rule
|
|
author: dudez
|
|
severity: info
|
|
tags: tech,linkerd
|
|
reference: https://linkerd.io
|
|
|
|
requests:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}"
|
|
headers:
|
|
l5d-dtab: /svc/*
|
|
|
|
matchers-condition: or
|
|
matchers:
|
|
- type: regex
|
|
name: via-linkerd-present
|
|
regex:
|
|
- '(?mi)^Via\s*?:.*?linkerd.*$'
|
|
part: header
|
|
|
|
- type: regex
|
|
name: l5d-err-present
|
|
regex:
|
|
- '(?mi)^l5d-err:.*$'
|
|
part: header
|
|
|
|
- type: regex
|
|
name: l5d-success-class-present
|
|
regex:
|
|
- '(?mi)^l5d-success-class: 0.*$'
|
|
part: header
|
|
|
|
- type: word
|
|
name: body-error-present
|
|
words:
|
|
- 'expected but end of input found at'
|
|
part: body
|