mirror of
https://github.com/projectdiscovery/nuclei-templates.git
synced 2026-02-11 21:23:34 +08:00
c83d035fff
* Edit magmi workflow * Add some workflow template + edit some template * Changing some templates * minor update * workflow matcher fixes * tech update * Seperate technology template * Update metabase-panel.yaml * Update lucee-detect.yaml * Update oneblog-detect.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update dolibarr-panel.yaml * Update gespage-panel.yaml * Update gespage-panel.yaml * Update mautic-crm-panel.yaml * Update kibana-panel.yaml * Update metabase-panel.yaml * Update home-assistant-detect.yaml * Update jitsi-meet-detect.yaml * Update lucee-detect.yaml * Update gotmls-plugin-lfi.yaml * Update and rename technologies/opencast-detect.yaml to exposed-panels/opencast-detect.yaml * duplicate template - cves/2020/CVE-2020-11738.yaml Co-authored-by: sandeep <sandeep@projectdiscovery.io> Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
57 lines
1.3 KiB
YAML
57 lines
1.3 KiB
YAML
id: openam-detect
|
|
|
|
info:
|
|
name: Detect OpenAM and OpenSSO
|
|
author: philippedelteil
|
|
severity: info
|
|
tags: tech,openam
|
|
|
|
requests:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}/openam/XUI"
|
|
- "{{BaseURL}}/XUI"
|
|
- "{{BaseURL}}/XUI/#login"
|
|
- "{{BaseURL}}/UI"
|
|
- "{{BaseURL}}/sso/XUI"
|
|
- "{{BaseURL}}/sso/UI"
|
|
- "{{BaseURL}}/sso/UI/#login"
|
|
- "{{BaseURL}}/openam/UI/login"
|
|
- "{{BaseURL}}/openam/UI/#loginlogin"
|
|
- "{{BaseURL}}/openam/UI/Login"
|
|
- "{{BaseURL}}/openam/XUI/Login"
|
|
- "{{BaseURL}}/openam/XUI/login"
|
|
- "{{BaseURL}}/openam/XUI/#login"
|
|
- "{{BaseURL}}/am/UI/Login"
|
|
- "{{BaseURL}}/am/UI/#login"
|
|
- "{{BaseURL}}/am/XUI/"
|
|
- "{{BaseURL}}/am/XUI/Login"
|
|
- "{{BaseURL}}/am/json/serverinfo/*"
|
|
- "{{BaseURL}}/openam/json/serverinfo/*"
|
|
|
|
redirects: true
|
|
stop-at-first-match: true
|
|
max-redirects: 2
|
|
matchers-condition: and
|
|
matchers:
|
|
- type: word
|
|
words:
|
|
- 'urlArgs : "v='
|
|
- 'Sign in to OpenAM'
|
|
- 'ForgeRock'
|
|
- 'forgerock'
|
|
- 'FRForgotUsername'
|
|
- 'successfulUserRegistrationDestination'
|
|
condition: or
|
|
|
|
- type: status
|
|
status:
|
|
- 200
|
|
|
|
extractors:
|
|
- type: regex
|
|
part: body
|
|
group: 1
|
|
regex:
|
|
- 'urlArgs : "v=([0-9.abcd]+)'
|