nuclei-templates/http/exposed-panels/globalprotect-panel.yaml

31 lines
1013 B
YAML
Raw Permalink Normal View History

2020-04-05 21:48:27 +00:00
id: globalprotect-panel
info:
name: Palo Alto Networks GlobalProtect Login Panel - Detect
2020-04-05 21:48:27 +00:00
author: organiccrap
2020-08-03 21:52:00 +00:00
severity: info
description: Palo Alto Networks GlobalProtect login panel was detected.
classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
cwe-id: CWE-200
cpe: cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:chrome:*:*:*
metadata:
max-request: 2
vendor: paloaltonetworks
product: globalprotect
tags: panel,panos,globalprotect,paloaltonetworks
2020-04-05 21:48:27 +00:00
http:
2020-04-05 21:48:27 +00:00
- method: GET
path:
- "{{BaseURL}}/global-protect/login.esp"
2020-10-29 11:51:44 +00:00
- "{{BaseURL}}/sslmgr"
2021-11-11 17:29:29 +00:00
stop-at-first-match: true
2020-04-05 21:48:27 +00:00
matchers:
- type: word
words:
2020-05-25 08:13:15 +00:00
- "<title>GlobalProtect Portal</TITLE>"
2020-10-29 11:51:44 +00:00
- "<msg>Invalid parameters</msg>"
2021-12-31 14:29:49 +00:00
condition: or
# digest: 4a0a00473045022100d2f987cbf5ee092ff69064995282b10ee5b116c383c7744a21fdb06a92eba795022048b0304254d1b0c4ca368a026bc5c9c8b84fe733cbb000ba7d297e43efeae508:922c64590222798bb761d5b6d8e72950