Merge pull request #11139 from 00xSayDoo/main

False Positive Detection for Cloudflare in CSP

http/miscellaneous/azure-blob-core-detect.yaml

@@ -10,7 +10,7 @@ info:
     max-request: 1
     verified: true
     shodan-query: html:"blob.core.windows.net"
-  tags: azur,blob,detect
+  tags: azure,blob,detect
 
 http:
   - method: GET
@@ -22,4 +22,4 @@ http:
         part: response
         words:
           - "blob.core.windows.net"
-# digest: 4a0a00473045022006936d241ffe12fbdc24fb7b8a5ddf0350b5d89186e9652c2b1349cf5bef957c0221008ab50b8b01f5974e0f7f67f5730e16f0df2ffd135509bd3de13a366cbaa904d6:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a00473045022006936d241ffe12fbdc24fb7b8a5ddf0350b5d89186e9652c2b1349cf5bef957c0221008ab50b8b01f5974e0f7f67f5730e16f0df2ffd135509bd3de13a366cbaa904d6:922c64590222798bb761d5b6d8e72950

http/technologies/tech-detect.yaml

@@ -3571,11 +3571,24 @@ http:
           - "X-Jenkins"
         part: header
 
+
       - type: word
         name: cloudflare
         words:
           - "cloudflare"
-        part: header
+        part: server
+
+      - type: regex
+        name: cloudflare
+        regex:
+          - ".*"
+        part: cf_cache_status
+
+      - type: regex
+        name: cloudflare
+        regex:
+          - ".*"
+        part: cf_ray
 
       - type: word
         name: akamai
@@ -3741,4 +3754,4 @@ http:
         words:
           - "X-ClickHouse-Summary"
         case-insensitive: true
-# digest: 4a0a004730450220335ffdf06e8ba346d7f25bf71fe8261bb434d46c19271b7b5601a8904de6555f0221009fb1d6c0e83f0fb6d88dc2a05c80f15750ed9ff0c0b2c19a51e0983ddfbdb5cb:922c64590222798bb761d5b6d8e72950
+# digest: 4a0a004730450220335ffdf06e8ba346d7f25bf71fe8261bb434d46c19271b7b5601a8904de6555f0221009fb1d6c0e83f0fb6d88dc2a05c80f15750ed9ff0c0b2c19a51e0983ddfbdb5cb:922c64590222798bb761d5b6d8e72950