id: akamai-bot-manager-detect

info:
  name: Akamai Bot Manager Protection - Detect
  author: Fazle Arefin
  severity: info
  description: |
    Checks if the website is protected by Akamai Bot Manager
  reference:
    - https://www.akamai.com/legal/manage-cookie-preferences
    - https://techdocs.akamai.com/identity-cloud/docs/hosted-login-cookies-and-local-storage-1
  metadata:
    max-request: 1
  tags: akamai,bot,security,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: regex
        part: header
        regex:
          - 'Set-Cookie:\s*_abck='
          - 'Set-Cookie:\s*bm_sv='
          - 'Set-Cookie:\s*ak_bmsc='
          - 'Set-Cookie:\s*bm_sz='
          - 'Set-Cookie:\s*bm_mi='
        condition: or
# digest: 490a00463044022052326daa4e2a502d8fb8afa2788a8fe14e45fc6157a1b11df4374db28e3ab35e022068088c962b7f2d05908228bc67ae7c81e7589cf89d9c1428d2fb397cdb88c810:922c64590222798bb761d5b6d8e72950