Magento Version Detect

ID: magento-version-detect

Severity: info

Author: sullo,dogancanbakir

Tags: tech,magento,cms

Description

Magento version detection via version module and copyright text.

YAML Source

id: magento-version-detect

info:
  name: Magento Version Detect
  author: sullo,dogancanbakir
  severity: info
  description: |
    Magento version detection via version module and copyright text.
  reference:
    - https://www.magento.com/
    - https://magento.stackexchange.com/a/62966
  classification:
    cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
    cwe-id: CWE-200
    cpe: cpe:2.3:a:magento:magento:*:*:*:*:*:*:*:*
  metadata:
    verified: "true"
    max-request: 2
    shodan-query: http.component:"Magento"
    product: magento
    vendor: magento
  tags: tech,magento,cms

http:
  - raw:
      - |
        GET /magento_version HTTP/1.1
        Host: {{Hostname}}
      - |
        GET /skin/frontend/default/default/css/styles.css HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: or
    matchers:
      - type: regex
        regex:
          - '^Magento/.*$'

      - type: word
        name: magento-1.9
        words:
          - "Copyright (c) 2014 Magento Inc."

      - type: word
        name: magento-1.8
        words:
          - "Copyright (c) 2013 Magento Inc."

      - type: word
        name: magento-1.7
        words:
          - "Copyright (c) 2012 Magento Inc."

      - type: word
        name: magento-1.6
        words:
          - "Copyright (c) 2011 Magento Inc."

      - type: word
        name: magento-1.4.1-1.5
        words:
          - "Copyright (c) 2010 Magento Inc."

      - type: word
        name: magento-1.4.0
        words:
          - "Copyright (c) 2009 Irubin Consulting Inc."

      - type: word
        name: magento-1.0-1.3
        words:
          - "Copyright (c) 2008 Irubin Consulting Inc."

    extractors:
      - type: regex
        part: body
        regex:
          - "Magento.*$"

      - type: regex
        part: body
        group: 1
        name: version
        regex:
          - 'Magento\/([0-9.]+) '
# digest: 4a0a004730450220437bd03786860710d02e9a22aecdd42c55e88b461194b4696893e646dfd09e9e022100d65c62eaf40b32ffd63742bcf412bfe967846de47eb9d39265ee3f3a7f5d8b41:922c64590222798bb761d5b6d8e72950

Guide to check the vulnerabilities

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

$ nuclei -u "URL" -t "http/technologies/magento-version-detect.yaml"

View on Github