Merge pull request #604 from jvoisin/x-powered-by

Add X-Powered-By fingerprinting
rapid7 · Feb 5, 2024 · 03a9700 · 03a9700
2 parents f289c62 + 10f64ee
commit 03a9700
Showing 1 changed file with 15 additions and 0 deletions.
diff --git a/xml/http_xpoweredby.xml b/xml/http_xpoweredby.xml
@@ -0,0 +1,15 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<fingerprints matches="http_header.x-powered-by" protocol="http" database_type="service" preference="0.90">
+  <!-- HTTP X-Powered_by headers are matched against these patterns to fingerprint HTTP services. -->
+
+  <fingerprint pattern="^PHP/([0-9.]+)$">
+    <description>PHP</description>
+    <example service.version="8.2.14">PHP/8.2.14</example>
+    <param pos="0" name="service.vendor" value="PHP"/>
+    <param pos="0" name="service.family" value="PHP"/>
+    <param pos="0" name="service.product" value="PHP"/>
+    <param pos="1" name="service.version"/>
+    <param pos="0" name="service.cpe23" value="cpe:/a:php:php:{service.version}"/>
+  </fingerprint>
+
+</fingerprints>