2023-12-12 20:20:01 +00:00
|
|
|
id: woodwing-panel
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: Woodwing Studio Server - Panel
|
|
|
|
|
author: pdteam
|
|
|
|
|
severity: info
|
|
|
|
|
reference:
|
|
|
|
|
- https://twitter.com/ynsmroztas/status/1680961398011047936
|
|
|
|
|
metadata:
|
2024-01-14 13:49:27 +00:00
|
|
|
max-request: 2
|
2023-12-12 20:20:01 +00:00
|
|
|
shodan-query: http.title:"WoodWing Studio Server"
|
|
|
|
|
fofa-query: title=="WoodWing Studio Server"
|
|
|
|
|
tags: woodwing,panel
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/StudioServer/server/apps/login.php"
|
|
|
|
|
- "{{BaseURL}}/server/apps/login.php"
|
|
|
|
|
|
|
|
|
|
stop-at-first-match: true
|
|
|
|
|
redirects: true
|
|
|
|
|
max-redirects: 2
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
2023-12-13 09:19:58 +00:00
|
|
|
- "contains(tolower(body), 'woodwing studio server')"
|
2024-01-14 14:05:19 +00:00
|
|
|
# digest: 490a0046304402202118d22b78194f8e15e0badfba81c2b17539da0516d484b5a061cb8db59ceed7022052c485fb841406d15d7384d7a2f376bb902e14826fe60f9936cbb0f08af9ec8e:922c64590222798bb761d5b6d8e72950
|
