id: week01-nextjs-lab-fingerprint

info:
  name: Week 1 Next.js Lab Fingerprint
  author: cj-olivenetworks-security-edu
  severity: info
  description: Detects the instructor-owned Next.js Nuclei training server by header and JSON body markers.
  reference:
    - https://vercel.com/changelog/next-js-may-2026-security-release
    - https://docs.projectdiscovery.io/templates/structure
  metadata:
    max-request: 1
    lab-only: true
  tags: nextjs,fingerprint,week01,lab

http:
  - method: GET
    path:
      - "{{BaseURL}}/api/lab/fingerprint"

    headers:
      User-Agent: "week01-nextjs-nuclei-lab"

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        part: header
        words:
          - "X-Nextjs-Lab: instructor-owned-only"

      - type: word
        part: body
        words:
          - "\"framework\": \"Next.js\""
          - "\"labOnly\": true"
        condition: and

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - '"simulatedNextVersion": "([^"]+)"'