id: fullstory-rum-detect

info:
  name: FullStory RUM - Detect
  author: Shivam Kamboj
  severity: info
  description: |
    Detects FullStory Session Replay & Digital Experience Intelligence artifacts.
  reference:
    - https://www.fullstory.com/
  metadata:
    max-request: 1
    verified: true
    shodan-query: html:"_fs_org"
    fofa-query: body="_fs_org" || body="fullstory.com/s/fs.js"
  tags: tech,discovery,rum,fullstory

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true

    matchers:
      - type: word
        part: body
        words:
          - "_fs_org"
          - "_fs_host"
          - "_fs_script"
          - "_fs_namespace"
        condition: and
# digest: 490a0046304402206697cc0b4d48c1e884b0f257fb5c516311b8459d5f5e2aae1c2b974158c28b240220356787cc0101cf53cb315a92516ee3db4e71cf9dd96432716d68f505afa1839b:922c64590222798bb761d5b6d8e72950