Skip to content

Commit

Permalink
Add Akamai Bot Manager detection
Browse files Browse the repository at this point in the history
  • Loading branch information
fazlearefin committed Aug 23, 2024
1 parent 0c6f6d1 commit 95bed8c
Showing 1 changed file with 30 additions and 0 deletions.
30 changes: 30 additions & 0 deletions http/technologies/akamai-bot-manager-detect.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
id: akamai-bot-manager-detect

info:
name: Detect Akamai Bot Manager Protection
author: Fazle Arefin
severity: info
description: Checks if the website is protected by Akamai Bot Manager
reference:
- https://www.akamai.com/legal/manage-cookie-preferences
- https://techdocs.akamai.com/identity-cloud/docs/hosted-login-cookies-and-local-storage-1
metadata:
max-request: 1
tags: akamai, bot, security, detection

http:
- method: GET
path:
- "{{BaseURL}}"
headers:
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:129.0) Gecko/20100101 Firefox/129.0 # legit user-agent to get around user-agent filtering
matchers:
- type: regex
part: header
regex:
- 'Set-Cookie:\s*_abck='
- 'Set-Cookie:\s*bm_sv='
- 'Set-Cookie:\s*ak_bmsc='
- 'Set-Cookie:\s*bm_sz='
- 'Set-Cookie:\s*bm_mi='
condition: or

0 comments on commit 95bed8c

Please sign in to comment.