id: powerbi-report-server-detect

info:
  name: PowerBI Report Server - Detect
  author: righettod
  severity: info
  description: |
    PowerBI Report Server was detected.
  reference:
    - https://www.microsoft.com/en-us/power-platform/products/power-bi/report-server
  metadata:
    max-request: 1
    verified: true
    shodan-query: http.html:"report server web portal"
  tags: panel,powerbi,detect

http:
  - method: GET
    path:
      - "{{BaseURL}}/reports/api/v2.0/System"
      - "{{BaseURL}}/reports/browse"

    stop-at-first-match: true
    redirects: true
    max-redirects: 2
    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains_any(to_lower(body), "power bi report server", "powerbireportserver", "<title>report server web portal</title>")'
        condition: and

    extractors:
      - type: json
        part: body
        name: version
        json:
          - '.ProductVersion'
# digest: 490a0046304402205a610f164f597f167c731c2c3177f61c0663edd579b0d27c358cb770d73e037202201b3619a546b903d850929dba9079669a6bdcdd7772820d030903d4acf60cd3b8:922c64590222798bb761d5b6d8e72950