id: lucee-detect

info:
  name: Detect Lucee
  author: geeknik,DhiyaneshDK
  severity: info
  description: Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development -- https://github.com/lucee/Lucee/
  metadata:
    max-request: 2
    shodan-query: "html:\"Lucee\""
    fofa-query: "app=\"Lucee-Engine\""
  tags: tech,lucee,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/lucee/doc/functions.cfm"
      - "{{BaseURL}}"

    stop-at-first-match: true
    matchers-condition: or
    matchers:
      - type: regex
        part: header
        regex:
          - "(?i)X-Lucee-Version"
          - "(?i)X-CB-Server: LUCEE"
          - "(?i)X-IDG-Appserver: Lucee"
        condition: or

      - type: word
        part: body
        words:
          - "Lucee Function Reference"
# digest: 490a0046304402206c24e148bc8afa4cf7aef39185f2a0a571c02b39a2ee1e20717822b6895af79d022021bcfdc2c67c3332689148e27d9bb87158d14c0c0e3a481e478103303506fcd8:922c64590222798bb761d5b6d8e72950