id: mezzanine-cms-detect

info:
  name: Mezzanine CMS - Detect
  author: Chirag Mistry
  severity: info
  description: |
    Detects instances of Mezzanine CMS based on unique fingerprints and identifiers.
  metadata:
    shodan-query:
      - http.component:"Mezzanine"
      - http.component:"mezzanine"
      - cpe:"cpe:2.3:a:mezzanine:mezzanine"
  tags: detect,mezzanine,cms,tech

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    payloads:
      paths:
        - "/"
        - "/admin/login/"
        - "/admin/dashboard/"
        - "/static/js/mezzanine.js"
        - "/settings.py"
        - "/mezzanine/"

    stop-at-first-match: true
    matchers-condition: or
    matchers:
      - type: word
        words:
          - "powered by Mezzanine"
          - "Welcome to Mezzanine"
          - "Mezzanine version"
        condition: or
        case-insensitive: true

      - type: regex
        regex:
          - "(?i)mezzanine\\s+(v[0-9.]+)"
          - "(?i)<title>Mezzanine CMS"
# digest: 4a0a004730450221008c0cd0a34d6069f3bfe0573c363c2be699d884eab7d0726018aaedeb40ba0067022031c58403f14bd6da0d62c4d640eeb473c359d7bcc1f480a8c81c22f00e8972f2:922c64590222798bb761d5b6d8e72950