id: microsoft-iis-version

info:
  name: Microsoft IIS version detect
  author: Wlayzz
  severity: info
  description: Some Microsoft IIS servers have the version on the response header. Useful when you need to find specific CVEs on your targets.
  metadata:
    max-request: 1
  tags: tech,microsoft,iis


http:
  - method: GET
    path:
      - "{{BaseURL}}"

    host-redirects: true
    max-redirects: 4
    matchers-condition: and
    matchers:
      - type: word
        part: header
        words:
          - "IIS"

    extractors:
      - type: kval
        part: header
        kval:
          - Server
# digest: 490a004630440220064f8cd5bc5f9ec7b7d7b2afaf0451a0a51eb2643a704bb362dd4cf5e76c5dcb022066d8dece1d0e1256f6fe41534f606dad0f638c98cd0f4408adc670382acbe0f6:922c64590222798bb761d5b6d8e72950