Skip to content

UniGUI Framework - Detect

ID: uni-gui-framework

Severity: info

Author: serrapa

Tags: tech,unigui

Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version.

id: uni-gui-framework
info:
name: UniGUI Framework - Detect
author: serrapa
severity: info
description: |
Checks for the presence of UniGUI framework and extracts its version along with the Sencha Ext JS version.
metadata:
verified: true
max-request: 1
shodan-query: http.title:"UniGUI"
tags: tech,unigui
http:
- method: GET
path:
- "{{BaseURL}}"
host-redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- "uni-xtheme-"
- "ext-all.js"
- "uniVars._extVer="
condition: or
- type: regex
part: body
regex:
- 'uni-(\d+\.\d+\.\d+\.\d+)/'
- 'uniVars._extVer="(\d+\.\d+\.\d+)"'
extractors:
- type: regex
part: body
name: uni_gui_version
regex:
- 'uni-(\d+\.\d+\.\d+\.\d+)'
- type: regex
part: body
name: ext_js_version
regex:
- 'uniVars._extVer="(\d+\.\d+\.\d+)"'
# digest: 4b0a00483046022100a264282b2e2def6490937382c243f9b4e52aa6c4b087fae3e5583236b664fc5d022100c1356a0d197bb05cd133a00ad824778f22a8702ecee344c51d682f47bed7c6ec:922c64590222798bb761d5b6d8e72950

This template is used to detect vulnerabilities in web applications. It can be used with the Nuclei tool to scan for specific patterns or behaviors.

Terminal window
$ nuclei -u "URL" -t "http/technologies/uni-gui-framework.yaml"

View on Github