0x727 / FingerprintHub

侦查守卫(ObserverWard)的指纹库
https://0x727.github.io/FingerprintHub/
MIT License
1.01k stars 188 forks source link

提交指纹-[vmware-aria-operations] #74

Closed j4vaovo closed 1 year ago

j4vaovo commented 1 year ago

测试目标

https://ec2-34-208-237-52.us-west-2.compute.amazonaws.com/

指纹的Yaml规则

name: vmware-aria-operations
priority: 3
nuclei_tags:
  - - aria
fingerprint:
  - path: '/auth/login?redirect=https%3A%2F%2F'
    request_method: get
    request_headers: {}
    request_data: ''
    status_code: 0
    headers: {}
    keyword:
      - /vmw-aria-operations-applications-prod-icon-horiz.svg"
    favicon_hash: []
github-actions[bot] commented 1 year ago

验证过程:

点击展开查看

```bash URL: https://ec2-34-208-237-52.us-west-2.compute.amazonaws.com/ HEADERS: server: nginx date: Fri, 28 Apr 2023 03:18:34 GMT content-type: text/html transfer-encoding: chunked connection: keep-alive vary: Accept-Encoding x-upstream: 10.23.0.117:39329 x-wavefront-cluster: /services-us-west-2c x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000; includeSubdomains STATUS_CODE: 200 TEXT: URL: https://ec2-34-208-237-52.us-west-2.compute.amazonaws.com/auth/login%3Fredirect=https%3A%2F%2F HEADERS: server: nginx date: Fri, 28 Apr 2023 03:18:35 GMT content-type: text/plain content-length: 100 connection: keep-alive STATUS_CODE: 404 TEXT: error='not_found' message='resource cannot be found' trackingid=cad0cb41-f695-4b50-9a65-a84755c3d606 ```

验证结果:

github-actions[bot] commented 1 year ago

验证过程:

点击展开查看

```bash URL: https://ec2-34-208-237-52.us-west-2.compute.amazonaws.com/ HEADERS: server: nginx date: Fri, 28 Apr 2023 03:20:23 GMT content-type: text/html transfer-encoding: chunked connection: keep-alive vary: Accept-Encoding x-upstream: 10.23.0.105:46821 x-wavefront-cluster: /services-us-west-2c x-frame-options: SAMEORIGIN strict-transport-security: max-age=31536000; includeSubdomains STATUS_CODE: 200 TEXT: URL: https://ec2-34-208-237-52.us-west-2.compute.amazonaws.com/auth/login%3Fredirect=https%3A%2F%2F HEADERS: server: nginx date: Fri, 28 Apr 2023 03:20:24 GMT content-type: text/plain content-length: 100 connection: keep-alive STATUS_CODE: 404 TEXT: error='not_found' message='resource cannot be found' trackingid=fd2a6266-1f38-45c1-b22a-4e526d8b10ac ```

验证结果:

cn-kali-team commented 1 year ago

有没有可能这个是amazonaws.com特有的指纹,你应该找一个不是amazonaws的vmware