id: websphere-detect

info:
  name: IBM WebSphere Application Server
  author: Shivam Kamboj
  severity: info
  description: Detects servers running IBM WebSphere Application Server via the Server header.
  reference:
    - https://www.ibm.com/products/websphere-application-server
  metadata:
    max-request: 1
    vendor: ibm
    product: websphere
    fofa-query: "WebSphere-Application-Server"
  tags: tech,websphere,ibm

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: regex
        part: header
        regex:
          - '(?i)WebSphere Application Server'

    extractors:
      - type: regex
        part: header
        group: 1
        regex:
          - '(?i)WebSphere Application Server/([0-9.]+)'
# digest: 4a0a00473045022100c9d61a211faabc7c967396daeca51802b45b0903f3f37e761639f2388c861eff022075ca11ebbea877c49cc815ec8ec52b912294db37a0e3d7877f232bdb0f6e271f:922c64590222798bb761d5b6d8e72950