id: atlassian-connect-descriptor

info:
  name: Atlassian Connect Descriptor - Detect
  author: pussycat0x
  severity: info
  description: |
    The app descriptor is a JSON file ( atlassian-connect. json ) that describes the app to the Atlassian application. The descriptor includes general information for the app, as well as the modules that the app wants to use or extend.
  reference:
    - https://developer.atlassian.com/cloud/jira/platform/connect-app-descriptor/
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"atlassian-connect.json"
  tags: atlassian,tech,jira,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/atlassian-connect.json"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '"name":'
          - '"vendor":'
          - '"key":'
          - '"baseUrl":'
          - '"authentication":'
        condition: and

      - type: word
        part: header
        words:
          - application/json

      - type: status
        status:
          - 200
# digest: 490a0046304402201b625509adb2e68e001c66067b5f7f0a16359338cf080b73feb1b577513e53d10220463c5858d0ae25aba140ef73ae1650619c31b2953f7c835c4a16239ec8cc224e:922c64590222798bb761d5b6d8e72950