id: sitemap-detect

info:
  name: Sitemap Detection
  author: houdinis
  severity: info
  description: |
    A sitemap is a file where you provide information about the pages, videos, and other files on your site, and the relationships between them.
  metadata:
    verified: true
    max-request: 3
    google-query: intext:"sitemap" filetype:txt,filetype:xml inurl:sitemap,inurl:"/sitemap.xsd" ext:xsd
  tags: miscellaneous,misc,generic,sitemap,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/sitemap.xml"
      - "{{BaseURL}}/sitemap.xsl"
      - "{{BaseURL}}/sitemap.xsd"

    stop-at-first-match: true

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "sitemap>"
        case-insensitive: true

      - type: word
        part: header
        words:
          - 'application/xml'

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100f3ccd78ee57840be1e17ffa8de25fe4b6483ad5f80c80b2f5ee20b809c91d938022100ed27e37858891b9371660790745b93deb260771c0201e248d6fac1f41c389900:922c64590222798bb761d5b6d8e72950