Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • A arachni
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 125
    • Issues 125
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 8
    • Merge requests 8
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • Arachni - Web Application Security Scanner Framework
  • arachni
  • Merge requests
  • !1003

Fingerprint the Adobe Experience Manager CMS framework

  • Review changes

  • Download
  • Email patches
  • Plain diff
Open Thomas Hartmann requested to merge github/fork/thomashartm/fingerprint-adobe-aem-framework into experimental Aug 04, 2018
  • Overview 0
  • Commits 3
  • Pipelines 1
  • Changes 3

This pull requests adds a fingerprinter to identify the Adobe Experience Manager (AEM) which is a java and OSGi based content management framework and platform. AEM driven web sites can be identified by very specific paths referenced from within the HTML source or includes scripts e.g.

  • /etc/design as a primary location of CSS and JS resources
  • The term granite e.g. in the path /libs/granite/token.json which stands for an Adobe internal UI framework
  • /etc.clientlibs which is the a proxy erefrencing so called CSS and JS clientlibraries
  • jcr_content which maps to a subnode of the current page inside AEM's cotent repository

AEM is pretty common among fortune 500 companies and can be pretty challenging to secure if not done right.

Assignee
Assign to
Reviewers
Request review from
Time tracking
Source branch: github/fork/thomashartm/fingerprint-adobe-aem-framework