id: logrocket-rum-detect

info:
  name: LogRocket RUM - Detect
  author: Shivam Kamboj
  severity: info
  description: |
    Detects LogRocket Session Replay & Frontend Monitoring artifacts.
  reference:
    - https://logrocket.com/
  metadata:
    verified: true
    max-request: 1
    vendor: logrocket
    product: logrocket
    shodan-query: http.html:"LogRocket.init"
    fofa-query: body="LogRocket.init" || body="cdn.logrocket.io"
  tags: tech,detect,rum,logrocket

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    redirects: true
    max-redirects: 2
    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(body, "LogRocket.min.js")'
        condition: and
# digest: 4b0a00483046022100d4b0c5bee1ba57a69c0f54a1999f5cab29a8163a18247b8622d6c414b9e76d06022100aa105836fd6983870cd0d7b6e8969b4f3e721cbad951e644e8967f84d92b9277:922c64590222798bb761d5b6d8e72950