Module for Jenkins version scanning (#1600)

* Add FortiWeb authentication bypass vulnerability check

Signed-off-by: Aarush <cs24b064@smail.iitm.ac.in>

* Remove FortiWeb auth bypass vulnerability entry

Removed entry for FortiWeb authentication bypass vulnerability.

Signed-off-by: Aarush <cs24b064@smail.iitm.ac.in>

* Fix vulnerability name in wp_plugin_cve_2021_38314.yaml

Signed-off-by: Aarush <cs24b064@smail.iitm.ac.in>

* Rename CVE identifier from 39314 to 39320

Signed-off-by: Aarush <cs24b064@smail.iitm.ac.in>

* version detection module added

---------

Signed-off-by: Aarush <cs24b064@smail.iitm.ac.in>

Author: Aarush289

docs/Modules.md

@@ -28,6 +28,7 @@ OWASP Nettacker Modules can be of type **Scan** (scan for something), **Vuln** (
 - '**ivanti_epmm_lastpatcheddate_scan**' - Scan the target for Ivanti EPMM last patched date via headers
 - '**ivanti_ics_lastpatcheddate_scan**' - Scan the target for Ivanti ICS last patched date via headers
 - '**ivanti_vtm_version_scan**' - Scan the target for Ivanti vTM appliance and return its version number
+- '**jenkins_version_scan**' - Scan the target for Jenkins automation server software version
 - '**joomla_template_scan**' - Scan the target for Joomla templates (identify Joomla sites)
 - '**joomla_user_enum_scan**' - Scan the target and enumerate Joomla users
 - '**joomla_version_scan**' - Scan the target and identify the Joomla version

nettacker/modules/scan/jenkins_version.yaml

@@ -0,0 +1,50 @@
+info:
+  name: jenkins_version_scan
+  author: OWASP Nettacker Team
+  severity: 3
+  description: Jenkins version scan - detects and displays the Jenkins automation server software version.
+  reference:
+    - https://www.jenkins.io/
+    - https://www.jenkins.io/changelog/
+    - https://www.jenkins.io/changelog-stable/
+  profiles:
+    - scan
+    - http
+    - jenkins
+    - info_severity
+
+payloads:
+  - library: http
+    steps:
+      - method: get
+        timeout: 3
+        headers:
+          User-Agent: "{user_agent}"
+        allow_redirects: true
+        ssl: false
+        url:
+          nettacker_fuzzer:
+            input_format: "{{schema}}://{target}:{{ports}}/"
+            prefix: ""
+            suffix: ""
+            interceptors:
+            data:
+              schema:
+                - "http"
+                - "https"
+              ports:
+                - 80
+                - 443
+                - 8080
+                - 8443
+        response:
+          condition_type: and
+          conditions:
+            status_code:
+              regex: "200|403"
+              reverse: false
+            headers:
+              X-Jenkins:
+                regex: \d+\.\d+(?:\.\d+)?
+                reverse: false
+          log: "response_dependent['headers']['X-Jenkins']"