docker-registry-api-unauth.yml

name: poc-yaml-docker-registry-api-unauth
manual: true
transport: http
rules:
    r0:
        request:
            cache: true
            method: GET
            path: /v2/
            follow_redirects: false
        expression: response.status == 200 && "docker-distribution-api-version" in response.headers && response.headers["docker-distribution-api-version"].contains("registry/2.0")
    r1:
        request:
            cache: true
            method: GET
            path: /v2/_catalog
            follow_redirects: false
        expression: response.status == 200 && response.content_type.contains("application/json") && response.body.bcontains(b"repositories")
expression: r0() && r1()
detail:
    author: p0wd3r
    links:
        - http://www.polaris-lab.com/index.php/archives/253/