id: sap-netweaver-webgui

info:
  name: SAP NetWeaver WebGUI Detection
  author: randomstr1ng
  severity: info
  description: Detection of SAP NetWeaver ABAP Webserver WebGUI
  metadata:
    max-request: 1
  tags: sap,webserver,tech,discovery

http:
  - method: GET
    path:
      - "{{BaseURL}}/sap/bc/gui/sap/its/webgui"

    host-redirects: true
    max-redirects: 2
    matchers:
      - type: word
        part: body
        words:
          - "sap-system-login"
          - "<title>Logon</title>"
        condition: or
# digest: 4b0a00483046022100ae467d35b048a3ed19d9682b21222f1817679ce25f4e71f77033898484130d3d022100f4dea475d97737f5476ee5700d93100af6374a31c7b876a18ebddc3c40ba78d2:922c64590222798bb761d5b6d8e72950