id: atlassian-connect-descriptor

info:
  name: Atlassian Connect Descriptor - Detect
  author: pussycat0x
  severity: info
  description: |
    The app descriptor is a JSON file ( atlassian-connect. json ) that describes the app to the Atlassian application. The descriptor includes general information for the app, as well as the modules that the app wants to use or extend.
  reference:
    - https://developer.atlassian.com/cloud/jira/platform/connect-app-descriptor/
  metadata:
    verified: true
    max-request: 1
    shodan-query: html:"atlassian-connect.json"
  tags: atlassian,tech,jira

http:
  - method: GET
    path:
      - "{{BaseURL}}/atlassian-connect.json"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - '"name":'
          - '"vendor":'
          - '"key":'
          - '"baseUrl":'
          - '"authentication":'
        condition: and

      - type: word
        part: header
        words:
          - application/json

      - type: status
        status:
          - 200
# digest: 4a0a00473045022100a448b20652babde3cf5928825180eba516d21a32d27488c70ea0c877551faf4e02207b94c2243706b29cdf3bac86a54660a00d128add50cf2864c831009e33e9f4f3:922c64590222798bb761d5b6d8e72950