Skip to content

Detect websites using Google bucket storage

ID: google-bucket-service

Severity: info

Author: pdteam

Tags: google,tech,bucket

id: google-bucket-service
info:
name: Detect websites using Google bucket storage
author: pdteam
severity: info
metadata:
max-request: 1
tags: google,tech,bucket
http:
- method: GET
path:
- "{{BaseURL}}"
matchers:
- type: dsl
dsl:
- contains(tolower(header), 'x-goog-component-count')
- contains(tolower(header), 'x-goog-expiration')
- contains(tolower(header), 'x-goog-generation')
- contains(tolower(header), 'x-goog-metageneration')
- contains(tolower(header), 'x-goog-stored-content-encoding')
- contains(tolower(header), 'x-goog-stored-content-length')
- contains(tolower(header), 'x-guploader-uploadid')
condition: or
# digest: 4b0a00483046022100eab53aaa6eb6bf44de8f9c6560e9dfd885d31790234af57d1637cbcc855e6b60022100c901afd7fa12585eb98d30d177d6dee6951980cc160d91907435fd6ea6eed3ba:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/google/google-bucket-service.yaml"

View on Github