Add SolarWinds Web Help Desk version detection module

docs/Modules.md

@@ -35,6 +35,7 @@ OWASP Nettacker Modules can be of type **Scan** (scan for something), **Vuln** (
 - '**pma_scan**' - Scan the target for PHP MyAdmin presence
 - '**port_scan**' - Scan the target for open ports identifying the popular services using signatures (.e.g SSH on port 2222)
 - '**smartermail_version_scan**' - Scan the target and identify the SmarterMail version
+- '**solarwinds_whd_version_scan**' - Scan the target and identify the SolarWinds Web Help Desk version
 - '**ssl_expiring_certificate_scan**' - Scan the target for SSL/TLS certificates nearing expiration
 - '**subdomain_scan**' - Scan the target for subdomains (target must be a domain e.g. owasp.org)
 - '**viewdns_reverse_iplookup_scan**' - Identify which sites/domains are hosted on the target host using ViewDNS.info

nettacker/modules/scan/solarwinds_whd_version.yaml

@@ -0,0 +1,50 @@
+info:
+  name: solarwinds_whd_version_scan
+  author: Nettacker Team
+  severity: 3
+  description: fetch SolarWinds Web Help Desk version from target
+  reference:
+    - https://www.solarwinds.com/
+  profiles:
+    - scan
+    - http
+    - solarwinds
+    - webhelpdesk
+    - version
+
+payloads:
+  - library: http
+    steps:
+      - method: get
+        timeout: 3
+        headers:
+          User-Agent: "{user_agent}"
+          Host: "{target}"
+        allow_redirects: false
+        ssl: false
+        url:
+          nettacker_fuzzer:
+            input_format: "{{schema}}://{target}:{{ports}}/helpdesk/WebObjects/Helpdesk.woa"
+            prefix: ""
+            suffix: ""
+            interceptors:
+            data:
+              schema:
+                - "http"
+                - "https"
+              ports:
+                - 80
+                - 443
+
+        response:
+          condition_type: and
+          conditions:
+            status_code:
+              regex: "200"
+              reverse: false
+
+            content:
+              regex: "\\?v=([0-9]+_[0-9]+_[0-9]+_[0-9]+)"
+              reverse: false
+
+          log: "SolarWinds WHD version: response_dependent['content']"