id: ispyconnect-detect

info:
  name: iSpyConnect - Detect
  author: arafatansari
  severity: info
  classification:
    cpe: cpe:2.3:a:ispyconnect:ispy:*:*:*:*:*:*:*:*
  metadata:
    verified: true
    max-request: 1
    vendor: ispyconnect
    product: ispy
    shodan-query: http.html:"iSpy"
  tags: tech,ispy,discovery

http:
  - method: GET
    path:
      - '{{BaseURL}}'

    matchers-condition: or
    matchers:
      - type: word
        part: body
        words:
          - 'iSpy is running'

      - type: word
        part: header
        words:
          - 'Server: iSpy'
# digest: 4a0a00473045022027d3e48981138e81aad26fc04223d3fa22c999f6e4eddede01d9fa0700c759ff022100821ae4e07a0923066ecf9f8c4bfe61bad19d1383753fe2130b7dc3f9de603571:922c64590222798bb761d5b6d8e72950