id: chromadb-installer

info:
  name: ChromaDB Installer - Detected
  author: pussycat0x
  severity: info
  description: |
    Detects the presence of the ChromaDB admin interface.The endpoint reveals connection details and authentication type.
  metadata:
    verified: true
    shodan-query: "ChromaDB"
    product: chromadb
    vendor: chroma-core
  tags: admin,chromadb,ai,ml

http:
  - method: GET
    path:
      - "{{BaseURL}}/setup"

    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_all(body, "<title>Chromadb Admin","Chroma connection string</label>","Authentication Type</div>")'
        condition: and
# digest: 490a00463044022047acf69925095a3bfa0a2efb5d1dbe79dc109b14e46c749d1f8419c628ca3f6b02204a5f288ef50214b8aaa6dba7edabb275ded7dc111e2f02fdf17707692f55ac51:922c64590222798bb761d5b6d8e72950