|
52 | 52 | }, |
53 | 53 | { |
54 | 54 | "name": "Django", |
55 | | - "patterns": ["django|csrftoken"], |
| 55 | + "patterns": ["(?:^|\\n)(?:x-powered-by|server|x-framework|x-generator):[^\\n]*\\bdjango\\b"], |
56 | 56 | "evidence": "响应头、Cookie 名称或 URL 包含后端框架线索" |
57 | 57 | }, |
| 58 | + { |
| 59 | + "name": "Django", |
| 60 | + "caseSensitive": true, |
| 61 | + "patterns": ["(?:^|\\n)set-cookie:[^\\n]*(?:^|[;,\\s])csrftoken(?:=|[,;\\s]|$)"], |
| 62 | + "evidence": "Set-Cookie 包含 Django csrftoken 特征" |
| 63 | + }, |
58 | 64 | { |
59 | 65 | "name": "Flask", |
60 | 66 | "patterns": ["flask"], |
|
67 | 73 | }, |
68 | 74 | { |
69 | 75 | "name": "Laravel", |
70 | | - "patterns": ["laravel|laravel_session|xsrf-token"], |
| 76 | + "patterns": [ |
| 77 | + "(?:^|\\n)(?:x-powered-by|x-framework|x-generator):[^\\n]*\\blaravel\\b", |
| 78 | + "(?:^|\\n)set-cookie:[^\\n]*(?:^|[;,\\s])laravel_session(?:=|[,;\\s]|$)", |
| 79 | + "(?:^|\\n)(?:set-cookie|cookie):[^\\n]*(?:^|[;,\\s])XSRF-TOKEN(?:=|[,;\\s]|$)" |
| 80 | + ], |
71 | 81 | "evidence": "响应头、Cookie 名称或 URL 包含后端框架线索" |
72 | 82 | }, |
73 | 83 | { |
|
98 | 108 | { |
99 | 109 | "name": "Go", |
100 | 110 | "patterns": [ |
101 | | - "gorilla\\.csrf|go-http-client|golang|(?:^|\\n)(?:server|x-powered-by):.*(?:gin|fiber|echo|beego|hertz|cloudwego|goframe|go\\s*frame|go-kratos|kratos|\\biris\\b|gobuffalo|\\bbuffalo\\b)" |
| 111 | + "gorilla\\.csrf|go-http-client|golang|(?:^|\\n)(?:server|x-powered-by):.*(?:\\bgin(?:/\\d+(?:\\.\\d+)*)?\\b|\\bfiber(?:/\\d+(?:\\.\\d+)*)?\\b|\\becho(?:/\\d+(?:\\.\\d+)*)?\\b|\\bbeego\\b|\\bhertz(?:/\\d+(?:\\.\\d+)*)?\\b|cloudwego|goframe|go\\s*frame|go-kratos|\\bkratos\\b|\\biris\\b|gobuffalo|\\bbuffalo\\b)" |
102 | 112 | ], |
103 | 113 | "evidence": "响应头、Cookie 名称或 URL 包含后端框架线索" |
104 | 114 | }, |
|
294 | 304 | }, |
295 | 305 | { |
296 | 306 | "name": "Baidu Cloud CDN", |
297 | | - "patterns": ["x-bce-|baidu|bcebos|yunjiasu"], |
| 307 | + "patterns": ["bdstatic|baidustatic|bdimg|yunjiasu|x-bce-cdn"], |
298 | 308 | "evidence": "响应头、Via、Server 或 URL 包含 CDN 厂商特征" |
299 | 309 | }, |
| 310 | + { |
| 311 | + "name": "Baidu BCE Object Storage / 百度智能云 BOS", |
| 312 | + "patterns": ["bcebos\\.com|x-bce-request-id|x-bce-content-crc32"], |
| 313 | + "evidence": "响应头、Via、Server 或 URL 包含百度智能云 BOS 特征" |
| 314 | + }, |
300 | 315 | { |
301 | 316 | "name": "Huawei Cloud CDN", |
302 | 317 | "patterns": ["x-hwcdn-|huaweicloud|hwcdn|cdnhwc"], |
|
334 | 349 | }, |
335 | 350 | { |
336 | 351 | "name": "UCloud CDN", |
337 | | - "patterns": ["ucloud|ufileos"], |
| 352 | + "patterns": [ |
| 353 | + "ucloud\\.cn|ufileos\\.com|ucloudstack\\.com|ucache\\.io", |
| 354 | + "(?:^|\\n)(?:server|via):[^\\n]*\\bucache\\b", |
| 355 | + "(?:^|\\n)x-ucloud-" |
| 356 | + ], |
338 | 357 | "evidence": "响应头、Via、Server 或 URL 包含 CDN 厂商特征" |
339 | 358 | }, |
340 | 359 | { |
|
7978 | 7997 | }, |
7979 | 7998 | { |
7980 | 7999 | "name": "Laravel", |
7981 | | - "patterns": ["set-cookie:.*(?:laravel_session|xsrf-token)"], |
| 8000 | + "patterns": [ |
| 8001 | + "set-cookie:.*(?:^|[;,\\s])laravel_session(?:=|[,;\\s]|$)", |
| 8002 | + "(?:set-cookie|cookie):.*(?:^|[;,\\s])XSRF-TOKEN(?:=|[,;\\s]|$)" |
| 8003 | + ], |
7982 | 8004 | "evidence": "Set-Cookie 包含 Laravel 会话特征" |
7983 | 8005 | }, |
7984 | 8006 | { |
|
7998 | 8020 | }, |
7999 | 8021 | { |
8000 | 8022 | "name": "Django", |
8001 | | - "patterns": ["set-cookie:.*(?:django|csrftoken)"], |
| 8023 | + "patterns": ["set-cookie:.*(?:^|[;,\\s])django(?:=|[,;\\s]|$)"], |
8002 | 8024 | "evidence": "Set-Cookie 包含 Django/csrftoken 特征" |
| 8025 | + }, |
| 8026 | + { |
| 8027 | + "name": "Django", |
| 8028 | + "caseSensitive": true, |
| 8029 | + "patterns": ["set-cookie:.*(?:^|[;,\\s])csrftoken(?:=|[,;\\s]|$)"], |
| 8030 | + "evidence": "Set-Cookie 包含 Django csrftoken 特征" |
8003 | 8031 | } |
8004 | 8032 | ] |
8005 | 8033 | }, |
|
0 commit comments