id: microsoft-iis-version

info:
  name: Microsoft IIS version detect
  author: Wlayzz
  severity: info
  description: Some Microsoft IIS servers have the version on the response header. Useful when you need to find specific CVEs on your targets.
  metadata:
    max-request: 1
  tags: tech,microsoft,iis,discovery


http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 4
    matchers-condition: and
    matchers:
      - type: word
        part: header
        words:
          - "IIS"

    extractors:
      - type: kval
        part: header
        kval:
          - Server
# digest: 4a0a0047304502201e14c3fb026b5b1cebe7ec4a373f867e137e439170982ef87e4a89e7d73d5134022100fda62ce42a61c0d07abb45b6774ed558605cc660fd20a305ef2ad25ac2711d61:922c64590222798bb761d5b6d8e72950