id: kong-detect

info:
  name: Detect Kong
  author: geeknik,joshlarsen
  severity: info
  description: The Cloud-Native API Gateway
  reference:
    - https://github.com/Kong/kong
  metadata:
    max-request: 1
  tags: tech,kong,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: word
        part: header
        words:
          - "server: kong"
          - "x-kong-response-latency"
          - "x-kong-upstream-latency"
          - "x-kong-proxy-latency"
          - "x-kong-admin-request-id"
        condition: or
        case-insensitive: true

    extractors:
      - type: kval
        kval:
          - server
# digest: 4a0a00473045022071407d9b5f6a251adbd136b4c749b649d221fd4c60d967b770d9fb3b52524d4b022100de8abc91eb9d3d82cdaf03ad4c28235b4ed01c787bd8f7245cc41afe7c1303aa:922c64590222798bb761d5b6d8e72950