id: datadog-rum-detect

info:
  name: Datadog Browser RUM - Detect
  author: Shivam Kamboj
  severity: info
  description: |
    Detects Datadog Browser RUM (Real User Monitoring) SDK artifacts in HTML responses.
  reference:
    - https://docs.datadoghq.com/real_user_monitoring/browser/
    - https://docs.datadoghq.com/real_user_monitoring/browser/setup/
    - https://www.npmjs.com/package/@datadog/browser-rum
  metadata:
    verified: true
    max-request: 1
    vendor: datadog
    product: browser-rum
    shodan-query: html:"DD_RUM.init"
  tags: tech,detect,rum,datadog

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true

    matchers:
      - type: word
        part: body
        words:
          - "DD_RUM.init"
          - "DD_RUM.onReady"
        condition: and
# digest: 4a0a0047304502205d1eb1230ef95f0912d4a6704c8442ef516b5928ff4089a9b67dce91e045b63b022100cbb7a8cdd8dde5e2b7144600f2d170d83f914294dca94e05e7617217ac537620:922c64590222798bb761d5b6d8e72950