Skip to content

Cobbler Version Detection

ID: cobbler-version

Severity: info

Author: c-sh0

Tags: tech,cobbler,api

Obtain cobbler version information

id: cobbler-version
info:
name: Cobbler Version Detection
author: c-sh0
severity: info
description: Obtain cobbler version information
metadata:
max-request: 1
tags: tech,cobbler,api
http:
- method: POST
path:
- "{{BaseURL}}/cobbler_api"
body: |
<?xml version='1.0'?>
<methodCall>
<methodName>extended_version</methodName>
<params></params>
</methodCall>
headers:
Content-Type: text/xml
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
part: body
words:
- '<name>version</name>'
extractors:
- type: regex
part: body
group: 1
regex:
- "<value><string>([0-9]{1,3}.[0-9]{1,3}.[0-9]{1,3})</string></value>"
# digest: 4b0a00483046022100bfcb1bd7a8c68c3dd3b42eeaf761d413a280a48978c953421d6a1ce76033d84c022100d284596ffc364895431373234b3a1cae27cb1b28dc360e645d7b174dd7ae2403:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/cobbler-version.yaml"

View on Github