id: lucee-detect

info:
  name: Detect Lucee
  author: geeknik,DhiyaneshDK
  severity: info
  description: Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development -- https://github.com/lucee/Lucee/
  metadata:
    max-request: 2
    shodan-query: "html:\"Lucee\""
    fofa-query: "app=\"Lucee-Engine\""
  tags: tech,lucee

http:
  - method: GET
    path:
      - "{{BaseURL}}/lucee/doc/functions.cfm"
      - "{{BaseURL}}"

    stop-at-first-match: true
    matchers-condition: or
    matchers:
      - type: regex
        part: header
        regex:
          - "(?i)X-Lucee-Version"
          - "(?i)X-CB-Server: LUCEE"
          - "(?i)X-IDG-Appserver: Lucee"
        condition: or

      - type: word
        part: body
        words:
          - "Lucee Function Reference"
# digest: 4a0a00473045022100e3af7a3ac0537712da26330aaecebf5329cfb19b32e295f185979fe85e0610ec0220592f9a6e228b9e314c535924e28842b54d55ff03f2f71f7fb07c985c7f48c69a:922c64590222798bb761d5b6d8e72950