Skip to content

Bamboo - Detection

ID: bamboo-detect

Severity: info

Author: bhutch

Tags: tech,bamboo,atlassian,detect,cicd

Detect the presence of Bamboo, a CI/CD tool.

id: bamboo-detect
info:
name: Bamboo - Detection
author: bhutch
severity: info
description: |
Detect the presence of Bamboo, a CI/CD tool.
classification:
cpe: cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*
metadata:
verified: true
max-request: 1
vendor: atlassian
product: bamboo
shodan-query: http.favicon.hash:-1379982221
category: devops
tags: tech,bamboo,atlassian,detect,cicd
http:
- method: GET
path:
- "{{BaseURL}}"
redirects: true
matchers:
- type: dsl
dsl:
- contains(to_lower(body), "<title>log into atlassian - atlassian bamboo</title>")
- contains(to_lower(body), "meta name=\"application-name\" content=\"bamboo\" />")
extractors:
- type: regex
name: version
group: 1
regex:
- '(?i)atlassian bamboo</a> version (.*) -'
# digest: 4b0a00483046022100842dfc1559d5e8fe120a73818d04a969e77e2d531818690dac4f3dff629dfe4b022100af2563df23195abb80e4f851913b7802f7c148d7fc3d368603f45460433c3844:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/bamboo-detect.yaml"

View on Github