OpenConnect VPN Server (ocserv) - Detect

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""OpenConnect VPN Server (ocserv) is an open-source VPN server compatible with Cisco AnyConnect clients."""

from kittysploit import *
from lib.protocols.http.http_client import Http_client


class Module(Scanner, Http_client):
    __info__ = {
        'name': 'OpenConnect VPN Server (ocserv) - Detect',
        'description': 'OpenConnect VPN Server (ocserv) is an open-source VPN server compatible with Cisco AnyConnect clients. It uses DTLS and TLS for secure connectivity and is commonly exposed on port 443 or 4443. The server header can expose OpenConnect or ocserv-specific markers.',
        'author': ['KittySploit Team'],
        'severity': 'info',
        'tags': ['web', 'scanner', 'panel', 'ocserv', 'openconnect', 'vpn'],
        'agent': {
            'risk': 'active',
            'effects': ['network_probe'],
            'expected_requests': 1,
            'reversible': True,
            'approval_required': False,
            'produces': ['tech_hints', 'risk_signals', 'endpoints'],
            'cost': 1.0,
            'noise': 0.3,
            'value': 1.0,
            'requires': {
                'min_endpoints': 0,
                'min_params': 0,
                'tech_hints_any': [],
                'tech_hints_all': [],
                'specializations_any': [],
                'risk_signals_any': [],
                'auth_session': False,
                'capabilities_any': [],
                'capabilities_all': [],
                'confidence_min': {},
                'confidence_min_any': {},
                'endpoint_pattern_any': [],
                'param_any': [],
                'api_surface_ready': False,
            },
            'chain': {
                'produces_capabilities': [
                    {
                        'capability': 'admin_surface',
                        'from_detail': '',
                    },
                ],
                'consumes_capabilities': [],
                'option_bindings': {},
                'suggested_followups': ['auxiliary/scanner/http/login_page_detector'],
            },
        },
        'references': ['https://gitlab.com/openconnect/ocserv', 'https://ocserv.gitlab.io/www/'],
    }

    def run(self):
        r = self.http_request(method="GET", path='/', allow_redirects=False)
        if not r or r.status_code != 200:
            return False
        headers = "\n".join(f"{k}: {v}" for k, v in r.headers.items())
        header_markers = (
            'ocserv',
            'OCServer',
        )
        if any(m in headers for m in header_markers):
            self.set_info(
                severity='info',
                reason="OpenConnect VPN Server (ocserv) detected",
                path='/',
            )
            return True
        return False