id: google-bucket-service

info:
  name: Detect websites using Google bucket storage
  author: pdteam
  severity: info
  metadata:
    max-request: 1
  tags: google,tech,bucket

http:
  - method: GET
    path:
      - "{{BaseURL}}"

    matchers:
      - type: dsl
        dsl:
          - contains(tolower(header), 'x-goog-component-count')
          - contains(tolower(header), 'x-goog-expiration')
          - contains(tolower(header), 'x-goog-generation')
          - contains(tolower(header), 'x-goog-metageneration')
          - contains(tolower(header), 'x-goog-stored-content-encoding')
          - contains(tolower(header), 'x-goog-stored-content-length')
          - contains(tolower(header), 'x-guploader-uploadid')
        condition: or
# digest: 4b0a00483046022100eab53aaa6eb6bf44de8f9c6560e9dfd885d31790234af57d1637cbcc855e6b60022100c901afd7fa12585eb98d30d177d6dee6951980cc160d91907435fd6ea6eed3ba:922c64590222798bb761d5b6d8e72950