Skip to content

Goliath Detection

ID: goliath-detect

Severity: info

Author: geeknik

Tags: tech,goliath

Goliath is a non-blocking Ruby web server framework

id: goliath-detect
info:
name: Goliath Detection
author: geeknik
severity: info
description: |
Goliath is a non-blocking Ruby web server framework
reference:
- https://github.com/postrank-labs/goliath
classification:
cpe: cpe:2.3:a:goliath_project:goliath:*:*:*:*:ruby:*:*:*
metadata:
verified: true
max-request: 1
vendor: goliath_project
product: goliath
shodan-query: 'Server: Goliath'
tags: tech,goliath
http:
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: regex
part: header
regex:
- Goliath+
extractors:
- type: kval
part: header
kval:
- Server
# digest: 4b0a00483046022100f2a1c900a1058f6cf45b021f37420c9df16b8adb333f97e35c5814c00aad5f75022100cf532ef10b9fa84532d1e5dd6259621f201591ae1f0877414840904253bff18c:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/goliath-detect.yaml"

View on Github