Netflix Conductor Version Detection
ID: netflix-conductor-version
Severity: info
Author: c-sh0
Tags: miscellaneous,tech,netflix,conductor,api,misc
Description
Section titled “Description”Obtain netflix conductor version information
YAML Source
Section titled “YAML Source”id: netflix-conductor-version
info: name: Netflix Conductor Version Detection author: c-sh0 severity: info description: Obtain netflix conductor version information reference: - https://github.com/Netflix/conductor/blob/v1.6.0-rc1/ui/src/server.js#L17 - https://github.com/Netflix/conductor/blob/v3.1.0/rest/src/main/java/com/netflix/conductor/rest/controllers/AdminResource.java#L42 classification: cpe: cpe:2.3:a:netflix:conductor:*:*:*:*:*:*:*:* metadata: max-request: 2 vendor: netflix product: conductor shodan-query: http.title:"Conductor UI", http.title:"Workflow UI" tags: miscellaneous,tech,netflix,conductor,api,misc
http: - method: GET path: - "{{BaseURL}}/api/admin/config" - "{{BaseURL}}/api/sys"
stop-at-first-match: true
matchers-condition: and matchers: - type: status status: - 200
- type: word part: header words: - 'application/json'
- type: word part: body words: - 'CONDUCTOR_' case-insensitive: true
extractors: - type: regex group: 1 regex: - 'conductor\-server\-([0-9.]+)\-' - '"version":"([0-9.]+)\-'# digest: 490a0046304402207d73f02091c7ac1180a6c1aa3a3fcff7a916666d80aab0ca30b467f06cec9b9a02201809cc9aa7090f1a752162d2a96ffcea91e4c404bd016d1956e948016af43158:922c64590222798bb761d5b6d8e72950Guide to check the vulnerabilities
Section titled “Guide to check the vulnerabilities”This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.
$ nuclei -u "URL" -t "http/miscellaneous/netflix-conductor-version.yaml"