id: telerik-fileupload-detect

info:
  name: Detect Telerik Web UI Fileupload Handler
  author: organiccrap
  severity: info
  description: This template detects the Telerik Web UI fileupload handler.
  metadata:
    max-request: 1
  tags: tech,telerik,fileupload,intrusive,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/Telerik.Web.UI.WebResource.axd?type=rau"

    matchers:
      - type: word
        words:
          - "RadAsyncUpload handler is registered succesfully"
# digest: 4a0a00473045022100914408955df1bf50abc8b47916da6a0ca7d66a1430de7e858f978c38e1fb47f402207440aad79272d702fada2deac13794abedc58c4d59b97f050f2651179a5b6461:922c64590222798bb761d5b6d8e72950