2023-12-12 20:20:01 +00:00
|
|
|
id: woodwing-panel
|
|
|
|
|
|
|
|
|
|
info:
|
2024-03-29 18:19:20 +00:00
|
|
|
name: Woodwing Studio Server Panel - Detect
|
2024-03-29 14:59:32 +00:00
|
|
|
author: pdteam,righettod
|
2023-12-12 20:20:01 +00:00
|
|
|
severity: info
|
|
|
|
|
reference:
|
|
|
|
|
- https://twitter.com/ynsmroztas/status/1680961398011047936
|
|
|
|
|
metadata:
|
2024-03-29 18:19:20 +00:00
|
|
|
verified: true
|
2024-01-14 13:49:27 +00:00
|
|
|
max-request: 2
|
2023-12-12 20:20:01 +00:00
|
|
|
shodan-query: http.title:"WoodWing Studio Server"
|
2024-03-29 18:19:20 +00:00
|
|
|
fofa-query: title=="WoodWing Studio Server"
|
2023-12-12 20:20:01 +00:00
|
|
|
tags: woodwing,panel
|
|
|
|
|
|
|
|
|
|
http:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/StudioServer/server/apps/login.php"
|
|
|
|
|
- "{{BaseURL}}/server/apps/login.php"
|
|
|
|
|
|
|
|
|
|
stop-at-first-match: true
|
|
|
|
|
redirects: true
|
|
|
|
|
max-redirects: 2
|
|
|
|
|
matchers:
|
|
|
|
|
- type: dsl
|
|
|
|
|
dsl:
|
2023-12-13 09:19:58 +00:00
|
|
|
- "contains(tolower(body), 'woodwing studio server')"
|
2024-03-29 14:59:32 +00:00
|
|
|
|
|
|
|
|
extractors:
|
|
|
|
|
- type: regex
|
|
|
|
|
part: body
|
|
|
|
|
group: 1
|
|
|
|
|
regex:
|
2024-03-29 18:19:20 +00:00
|
|
|
- '<!---->v([0-9.]+\s+Build\s+[0-9]+)'
|
2024-03-29 18:24:27 +00:00
|
|
|
# digest: 490a00463044022001a1c753049c41a5a0bcc80814014afa41fe28d5baa2b4a3f631f0d1152b46ee022074d12ded239fcb6dd5b5738c61de27286e5b4a705c65ef0bb69fdb4e45da4554:922c64590222798bb761d5b6d8e72950
|
